Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2007-2025

Опубликовано: 13 апр. 2007
Источник: nvd
CVSS2: 7.5
EPSS Низкий

Описание

Unrestricted file upload vulnerability in the UpLoad feature (lib/plugin/UpLoad.php) in PhpWiki 1.3.11p1 allows remote attackers to upload arbitrary PHP files with a double extension, as demonstrated by .php.3, which is interpreted by Apache as being a valid PHP file.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:phpwiki:phpwiki:1.3.11p1:*:*:*:*:*:*:*

EPSS

Процентиль: 79%
0.01289
Низкий

7.5 High

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

ubuntu
больше 18 лет назад

Unrestricted file upload vulnerability in the UpLoad feature (lib/plugin/UpLoad.php) in PhpWiki 1.3.11p1 allows remote attackers to upload arbitrary PHP files with a double extension, as demonstrated by .php.3, which is interpreted by Apache as being a valid PHP file.

debian
больше 18 лет назад

Unrestricted file upload vulnerability in the UpLoad feature (lib/plug ...

github
больше 3 лет назад

Unrestricted file upload vulnerability in the UpLoad feature (lib/plugin/UpLoad.php) in PhpWiki 1.3.11p1 allows remote attackers to upload arbitrary PHP files with a double extension, as demonstrated by .php.3, which is interpreted by Apache as being a valid PHP file.

EPSS

Процентиль: 79%
0.01289
Низкий

7.5 High

CVSS2

Дефекты

NVD-CWE-Other