Description

Unrestricted file upload vulnerability in signup.php in e107 0.7.8 and earlier, when photograph upload is enabled, allows remote attackers to upload and execute arbitrary PHP code via a filename with a double extension such as .php.jpg.

Remediation

References

CVE-2007-3429

Related Vulnerabilities

Joomla CVE-2017-14595 Vulnerability (CVE-2017-14595)

Oracle Database Server CVE-2012-0519 Vulnerability (CVE-2012-0519)

Magento Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-9584)

MySQL CVE-2015-2566 Vulnerability (CVE-2015-2566)

PHP mail function ASCII control character header spoofing vulnerability

Severity

Medium

Classification

CVE-2007-3429

Tags

Missing Update Known Vulnerabilities