CVE-2008-3232

CVE-2008-3232 describes an unrestricted file upload vulnerability in Dotclear 1.2.7.1 and earlier, specifically within the ecrire/images.php component. This critical vulnerability allows remote authenticated users to execute arbitrary code by uploading malicious files with executable extensions and then directly accessing them. With a CVSS score of 9.3, it poses a significant risk due to its network-based attack vector, medium complexity, and complete compromise of confidentiality, integrity, and availability. Despite its high severity, there is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.