Security Advisory
CVE-2007-3403
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
Unrestricted file upload vulnerability in upload.php in dreamLog (aka dreamblog) 0.5 allows remote attackers to upload and execute arbitrary PHP code in uploads/images/ via the uploadedFile[] parameter.