CVE-2008-0492
43Vexday Risk Score
Patch soon. It has a working public exploit.
ssvc Attendepss 30%
from disclosure to weapon830 days
Published on NVDJan 30
1st PoC+830d
metasploitJan 25
exploitation probability
30%top 2% of all CVEs
observed exploitation
nono source reports it
2 public exploit(s)
Stack-based buffer overflow in the Persits.XUpload.2 ActiveX control in XUpload.ocx 3.0.0.4 and earlier in Persits XUpload 3.0 allows remote attackers to execute arbitrary code via a long argument to the AddFile method. NOTE: some of these details are obtained from third party information.
Affected products
n/a · n/apublic PoCs found — 2
exploitdbwww.exploit-db.com/exploits/16576unverifiedcve_referencewww.exploit-db.com/exploits/4987unverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.