medium6.8Public exploit code
CVE-2007-3429
Unrestricted file upload vulnerability in signup.php in e107 0.7.8 and earlier, when photograph upload is enabled, allows remote attackers to upload and execut…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- e107 < 0.7.8 - 'photograph' Arbitrary File Upload2007-06-24 · webapps · php · Verified
Impact
Unrestricted file upload vulnerability in signup.php in e107 0.7.8 and earlier, when photograph upload is enabled, allows remote attackers to upload and execute arbitrary PHP code via a filename with a double extension such as .php.jpg.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| E107 | E107 | Versions 0.7, 0.7.1, 0.7.2, 0.7.3, 0.7.4, 0.7.5 |
References
- NVD record
- CVE.org record
- http://osvdb.org/45426
- http://www.g00ns-forum.net/showthread.php?t=9388
- http://www.securityfocus.com/bid/24609
- https://exchange.xforce.ibmcloud.com/vulnerabilities/35022
- https://www.exploit-db.com/exploits/4099
- http://osvdb.org/45426
- http://www.g00ns-forum.net/showthread.php?t=9388
- http://www.securityfocus.com/bid/24609
- https://exchange.xforce.ibmcloud.com/vulnerabilities/35022
- https://www.exploit-db.com/exploits/4099