Lucene search
HistoryJan 09, 2007 - 2:28 a.m.
CVE-2007-0123
cve
uber uploader
file upload
vulnerability
remote attack
php
server configurations
7.5 High
AI Score
Confidence
Low
6.8 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.009 Low
EPSS
Percentile
82.1%
Unrestricted file upload vulnerability in Uber Uploader 4.2 allows remote attackers to upload and execute arbitrary PHP scripts by naming them with a .phtml extension, which bypasses the .php extension check but is still executable on some server configurations.
| CPE | Name | Operator | Version |
|---|---|---|---|
| uber_uploader:uber_uploader | uber uploader | eq | 4.2 |
Related
prion
prion
Unrestricted file upload
2007-01-09 02:28:00
Default configuration
2008-01-08 19:46:00
cve
cve
CVE-2007-6676
2008-01-08 19:46:00
securityvulns
securityvulns
7.5 High
AI Score
Confidence
Low
6.8 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.009 Low
EPSS
Percentile
82.1%
Related for CVE-2007-0123