CVE-2008-4798: Webgui

High severity, CVSS 9.3. EPSS: 4% chance of exploitation in the next 30 days.

The loadModule function in lib/WebGUI/Asset.pm in WebGUI before 7.5.30 (stable) allows remote attackers to execute arbitrary code by uploading a Perl module and accessing it via a crafted URL.

Affected products

• Webgui Webgui: up to and including 7.3.22; up to and including 7.5; up to and including 7.5.1; up to and including 7.5.2; up to and including 7.5.3; up to and including 7.5.4; …

Published 2008-10-30. Last modified 2026-06-16.