CVE-2007-3429

Unrestricted file upload vulnerability in signup.php in e107 0.7.8 and earlier, when photograph upload is enabled, allows remote attackers to upload and execute arbitrary PHP code via a filename with a double extension such as .php.jpg.

Link	Resource
http://www.g00ns-forum.net/showthread.php?t=9388
http://www.securityfocus.com/bid/24609
http://osvdb.org/45426
https://exchange.xforce.ibmcloud.com/vulnerabilities/35022
https://www.exploit-db.com/exploits/4099

Configuration 1

cpe:2.3:a:e107:e107:0.7.7:*:*:*:*:*:*:* cpe:2.3:a:e107:e107:0.7.4:*:*:*:*:*:*:* cpe:2.3:a:e107:e107:0.7.5:*:*:*:*:*:*:* cpe:2.3:a:e107:e107:0.7.2:*:*:*:*:*:*:* cpe:2.3:a:e107:e107:0.7:*:*:*:*:*:*:* cpe:2.3:a:e107:e107:0.7.1:*:*:*:*:*:*:* cpe:2.3:a:e107:e107:0.7.8:*:*:*:*:*:*:* cpe:2.3:a:e107:e107:0.7.6:*:*:*:*:*:*:* cpe:2.3:a:e107:e107:0.7.3:*:*:*:*:*:*:*

---

Published : 2007-06-27 12:30

Updated : 2017-10-11 01:32

---

NVD link : CVE-2007-3429

Mitre link : CVE-2007-3429

No products.

NVD-CWE-Other