medium6.5Public exploit code
CVE-2007-4057
Unrestricted file upload vulnerability in pfs.php in Neocrome Seditio 121 and earlier allows remote authenticated users to upload arbitrary PHP code via a file…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Seditio CMS 121 - 'pfs.php' Arbitrary File Upload2007-07-27 · webapps · php · Verified
Impact
Unrestricted file upload vulnerability in pfs.php in Neocrome Seditio 121 and earlier allows remote authenticated users to upload arbitrary PHP code via a filename ending with (1) .php.gif, (2) .php.jpg, or (3) .php.png.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Neocrome | Seditio | through 121 |
References
- NVD record
- CVE.org record
- http://osvdb.org/39023
- http://www.securityfocus.com/bid/25130
- https://exchange.xforce.ibmcloud.com/vulnerabilities/35681
- https://www.exploit-db.com/exploits/4235
- http://osvdb.org/39023
- http://www.securityfocus.com/bid/25130
- https://exchange.xforce.ibmcloud.com/vulnerabilities/35681
- https://www.exploit-db.com/exploits/4235