Security Advisory

CVE-2007-2025

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2007-04-13 18:00:00

Last updated 2024-08-07 13:23:50

Assigner mitre

State PUBLISHED

Description

Unrestricted file upload vulnerability in the UpLoad feature (lib/plugin/UpLoad.php) in PhpWiki 1.3.11p1 allows remote attackers to upload arbitrary PHP files with a double extension, as demonstrated by .php.3, which is interpreted by Apache as being a valid PHP file.

← Browse all CVEs View on cve.org ↗