CVE-2008-2648: Mebiblio

Medium severity, CVSS 6.8. EPSS: 3.3% chance of exploitation in the next 30 days.

Unrestricted file upload vulnerability in upload/uploader.html in meBiblio 0.4.7 allows remote attackers to execute arbitrary code by uploading a .php file, then accessing it via a direct request to the files/ directory.

Affected products

• Mebiblio Mebiblio: version 0.4.7 only

Published 2008-06-10. Last modified 2026-06-16.