24 Dec 2018

CVE-2007-3429

6.8 Medium Severity

Unrestricted file upload vulnerability in signup.php in e107 0.7.8 and earlier, when photograph upload is enabled, allows remote attackers to upload and execute arbitrary PHP code via a filename with a double extension such as .php.jpg.

suggest your own:

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Apps (0)

Operating Systems (0)

xtranslations

xdetection

xremediation

Comments (0)