high7.5Public exploit code
CVE-2007-5733
Unrestricted file upload vulnerability in upload/upload.php in Japanese PHP Gallery Hosting, when Open directory mode is enabled, allows remote attackers to up…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Japanese PHP Gallery Hosting - Arbitrary File Upload2007-10-23 · webapps · php · Verified
Impact
Unrestricted file upload vulnerability in upload/upload.php in Japanese PHP Gallery Hosting, when Open directory mode is enabled, allows remote attackers to upload and execute arbitrary PHP code via a ServerPath parameter specifying a filename with a double extension. NOTE: some of these details are obtained from third party information.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Japanese Php Gallery Hosting | Japanese Php Gallery Hosting | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- http://osvdb.org/39015
- http://securityreason.com/securityalert/3322
- http://www.securityfocus.com/archive/1/482676/100/0/threaded
- http://www.securityfocus.com/bid/26179
- http://osvdb.org/39015
- http://securityreason.com/securityalert/3322
- http://www.securityfocus.com/archive/1/482676/100/0/threaded
- http://www.securityfocus.com/bid/26179