CVE-2008-1790: Iscripts Socialware

Medium severity, CVSS 6.5. EPSS: 1.1% chance of exploitation in the next 30 days.

Unrestricted file upload vulnerability in iScripts SocialWare allows remote authenticated administrators to upload arbitrary files via a crafted logo file in the "Manage Settings" functionality. NOTE: remote exploitation is facilitated by a separate SQL injection vulnerability.

Affected products

• Iscripts Socialware: any version

Published 2008-04-15. Last modified 2026-06-16.