2 matches found
CVE-2010-0757
WikyBlog 1.7.3rc2 is affected by an unrestricted file upload vulnerability in index.php/Attach. An authenticated user can upload a file with an executable extension via the uploadform action and then access it directly in userfiles/[username]/uploaded/ to execute arbitrary code. The root cause is...
6.5CVSS7.6AI score0.0315EPSS
SaveExploits2References5Affected Software1
20