Lucene search
HistoryFeb 12, 2007 - 7:28 p.m.
CVE-2007-0871
cve-2007-0871
file upload vulnerability
extremepow
extreme file hosting
php
remote code execution
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.1 High
AI Score
Confidence
High
0.123 Low
EPSS
Percentile
95.5%
Unrestricted file upload vulnerability in eXtremePow eXtreme File Hosting allows remote attackers to upload arbitrary PHP code via a filename with a double extension such as (1) .rar.php or (2) .zip.php.
Affected configurations
Node
extremepowextreme_file_hosting
| CPE | Name | Operator | Version |
|---|---|---|---|
| extremepow:extreme_file_hosting | extremepow extreme file hosting | eq | * |
Related
prion
prion
Unrestricted file upload
2007-02-12 19:28:00
cvelist
cvelist
CVE-2007-0871
2007-02-12 19:00:00
nvd
nvd
CVE-2007-0871
2007-02-12 19:28:00
securityvulns
securityvulns
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.1 High
AI Score
Confidence
High
0.123 Low
EPSS
Percentile
95.5%
Related for CVE-2007-0871