CVE-2008-6849: w2b Phpgreetcards

Medium severity, CVSS 6.8. EPSS: 2.3% chance of exploitation in the next 30 days.

Unrestricted file upload vulnerability in index.php in phpGreetCards 3.7 allows remote attackers to execute arbitrary PHP code by uploading a file with an executable extension, then accessing it via a via a link that is listed by userfiles/number_shell.php.

Affected products

• w2b Phpgreetcards: version 3.7 only

Published 2009-07-07. Last modified 2026-06-16.