CVE-2008-4798

Severity: critical (CVSS 9.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 4.0% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2008-10-30 · updated 2026-06-16
Weakness: CWE-94

Description

The loadModule function in lib/WebGUI/Asset.pm in WebGUI before 7.5.30 (stable) allows remote attackers to execute arbitrary code by uploading a Perl module and accessing it via a crafted URL.

Affected products

Webgui: through 7.3.22; through 7.5; through 7.5.1; through 7.5.2; through 7.5.3; through 7.5.4

References

http://secunia.com/advisories/32438
http://www.securityfocus.com/bid/31947
http://www.vupen.com/english/advisories/2008/2944
http://www.webgui.org/bugs/tracker/8980
http://www.webgui.org/getwebgui/advisories/webgui-7.5.30-stable-released
http://www.webgui.org/uploads/70/o2/70o29CTLCGWjntJrLYdmJA/asset-security-7.4.diff
https://exchange.xforce.ibmcloud.com/vulnerabilities/46137
http://secunia.com/advisories/32438
http://www.securityfocus.com/bid/31947
http://www.vupen.com/english/advisories/2008/2944
http://www.webgui.org/bugs/tracker/8980
http://www.webgui.org/getwebgui/advisories/webgui-7.5.30-stable-released

Get alerted when CVE-2008-4798 or the next vulnerability affects your stack