high7.5
CVE-2007-1235
Unrestricted file upload vulnerability in sitex allows remote attackers to upload arbitrary PHP code via an avatar filename with a double extension such as .ph…
Impact
Unrestricted file upload vulnerability in sitex allows remote attackers to upload arbitrary PHP code via an avatar filename with a double extension such as .php.jpg, which fails verification and is saved as a .php file.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Bj Sintay | Sitex | Version 0.7.3 |