CVE-2007-3403

The CVE-2007-3403 entry describes an unrestricted file upload vulnerability in the dreamLog (aka dreamblog) 0.5 package, specifically in upload.php. An attacker can upload arbitrary files via the uploadedFile[] parameter and place them under uploads/images/, enabling remote code execution for PHP...