medium6.5Public exploit code
CVE-2007-0764
Unrestricted file upload vulnerability in F3Site 2.1 and earlier allows remote authenticated administrators to upload and execute arbitrary PHP scripts via GIF…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- F3Site 2.1 - Remote Code Execution2007-02-02 · webapps · php · Verified
Impact
Unrestricted file upload vulnerability in F3Site 2.1 and earlier allows remote authenticated administrators to upload and execute arbitrary PHP scripts via GIF86 header in a file in the uplf parameter, which can be later accessed via a relative pathname in the dir parameter in adm.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| F3site | F3site | Version 2.1 |