CVE-2008-4798
N/A
Published: October 30, 2008 at 08:49 PM UTC
Updated: June 16, 2026 at 10:58 PM UTC
1 product affected across 1 vendorWebgui
Using N/A by N/A?
Get instant alerts when new vulnerabilities affect N/A - before attackers find them.
Real-time alertsTrack your software stackFree plan available
Severity
N/A
Exploit prediction
EPSS 4%
Description
The loadModule function in lib/WebGUI/Asset.pm in WebGUI before 7.5.30 (stable) allows remote attackers to execute arbitrary code by uploading a Perl module and accessing it via a crafted URL.
Affected
Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.
v ≤ 7.3.22v ≤ 7.5v ≤ 7.5.1v ≤ 7.5.10v ≤ 7.5.11v ≤ 7.5.13v ≤ 7.5.14v ≤ 7.5.15v ≤ 7.5.16v ≤ 7.5.17v ≤ 7.5.18v ≤ 7.5.19v ≤ 7.5.2v ≤ 7.5.20v ≤ 7.5.21v ≤ 7.5.22v ≤ 7.5.23v ≤ 7.5.24v ≤ 7.5.3v ≤ 7.5.4v ≤ 7.5.5v ≤ 7.5.6v ≤ 7.5.7v ≤ 7.5.8v ≤ 7.5.97.07.0.17.0.27.0.37.0.47.0.57.0.67.0.77.0.87.0.97.17.1.17.1.27.1.37.27.2.17.2.27.2.37.37.3.17.3.107.3.117.3.127.3.137.3.147.3.157.3.167.3.177.3.187.3.197.3.27.3.207.3.217.3.37.3.47.3.57.3.67.3.77.3.87.3.97.4.17.4.107.4.117.4.127.4.137.4.147.4.157.4.167.4.177.4.187.4.197.4.27.4.207.4.217.4.227.4.237.4.257.4.267.4.37.4.47.4.57.4.67.4.77.4.87.4.9
Remediation
No guide yetNo remediation guidance has been written for this CVE yet. What the record does show:
Patch and advisory references
References (7)
Third Party Advisoryx_refsource_SECUNIAVendor Advisory
Source: [email protected]
http://secunia.com/advisories/32438VDB Entryx_refsource_VUPEN
Source: [email protected]
http://www.vupen.com/english/advisories/2008/2944x_refsource_CONFIRM
Source: [email protected]
http://www.webgui.org/getwebgui/advisories/webgui-7.5.30-stable-releasedVDB Entryx_refsource_XF
Source: [email protected]
https://exchange.xforce.ibmcloud.com/vulnerabilities/46137Quick Info
StatusMODIFIED
CWE
CWE-94
Get alerted
Stop reading CVE feeds looking for your own stack
Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.
Free plan, no card