medium4.6
CVE-2007-1155
Unrestricted file upload vulnerability in webSPELL allows remote authenticated administrators to upload and execute arbitrary PHP code via the add squad featur…
Impact
Unrestricted file upload vulnerability in webSPELL allows remote authenticated administrators to upload and execute arbitrary PHP code via the add squad feature. NOTE: this issue may be an administrative feature, in which case this CVE may be REJECTED.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Webspell | Webspell | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- http://securityreason.com/securityalert/2337
- http://www.securityfocus.com/archive/1/460937/100/0/threaded
- https://exchange.xforce.ibmcloud.com/vulnerabilities/32670
- http://securityreason.com/securityalert/2337
- http://www.securityfocus.com/archive/1/460937/100/0/threaded
- https://exchange.xforce.ibmcloud.com/vulnerabilities/32670