CVE-2007-1552

2007-03-2022:00:00

mitre

www.cve.org

AI Score

7.3

Confidence

High

EPSS

0.124

Percentile

95.4%

JSON

Unrestricted file upload vulnerability in usercp.php in MetaForum 0.513 Beta restricts file types based on the MIME type in the Content-type HTTP header, which allows remote attackers to upload and execute arbitrary scripts via an image MIME type with a filename containing an executable extension such as .php.