CVE-2008-4878: Mywebcards Webcards

High severity, CVSS 8.5. EPSS: 4% chance of exploitation in the next 30 days.

Unrestricted file upload vulnerability in the "Add Image Macro" feature in WebCards 1.3 allows remote authenticated administrators to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the uploaded file.

Affected products

• Mywebcards Webcards: up to and including 1.3

Published 2008-11-01. Last modified 2026-06-16.