CVE-2008-7215: Brilaps Mostlyce

Medium severity, CVSS 5.8. EPSS: 1.8% chance of exploitation in the next 30 days.

The Image Manager in MOStlyCE before 2.4, as used in Mambo 4.6.3 and earlier, allows remote attackers to rename arbitrary files and cause a denial of service via modified file[NewFile][name], file[NewFile][tmp_name], and file[NewFile][size] parameters in a FileUpload command, which are used to modify equivalent variables in $_FILES that are accessed when the is_uploaded_file check fails.

Affected products

• Brilaps Mostlyce: up to and including 2.0
• Mambo-Foundation Mambo: up to and including 4.6.3; version 4.6.2 only

Published 2009-09-11. Last modified 2026-06-16.