CVE-2007-3292

CVE-2007-3292 : LiveCMS 3.4 and earlier is vulnerable to an unrestricted file upload, enabling remote attackers to upload and execute arbitrary PHP by submitting a PHP file as the image type for an article. Root cause: inadequate validation of the uploaded file type during image handling. Impact:...