CVE-2007-1235

2007-03-0319:00:00

mitre

www.cve.org

AI Score

7.1

Confidence

High

EPSS

0.007

Percentile

80.9%

JSON

Unrestricted file upload vulnerability in sitex allows remote attackers to upload arbitrary PHP code via an avatar filename with a double extension such as .php.jpg, which fails verification and is saved as a .php file.

References

osvdb.org/33157

securityreason.com/securityalert/2373

www.securityfocus.com/archive/1/461305/100/0/threaded