6.7 Medium
AI Score
Confidence
Low
0.023 Low
EPSS
Percentile
89.6%
admin/uploadgames.php in MySpace Content Zone (MCZ) 3.x does not require administrative privileges, which allows remote attackers to perform unrestricted file uploads, as demonstrated by uploading (1) a .php file and (2) a .php%00.jpeg file.
osvdb.org/40211
secunia.com/advisories/28159
www.securityfocus.com/bid/27062
www.exploit-db.com/exploits/4741