PT-2007-5698 · Phphq.Net · Phphq.Net Phuploader

Publicado 2007-08-25 · Atualizado 2008-11-15 · CVE-2007-4527

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions phphq.Net phUploader version 1.2

Description The issue concerns an unrestricted file upload vulnerability in the phUploader.php file. This allows remote attackers to upload and execute arbitrary code. The exact vectors used for the attack are not specified.

Recommendations For version 1.2, consider restricting or disabling the file upload functionality in phUploader.php until a fix is available. As a temporary workaround, restrict access to the phUploader.php file to minimize the risk of exploitation.

Exploit

Correção

Identificadores relacionados

CVE-2007-4527

Produtos afetados

Phphq.Net Phuploader

Referências · 4

• 🔥 https://exploit-db.com/exploits/10574 · Exploit
• http://securityfocus.com/bid/25405 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-4527 · Nota de Segurança
• http://osvdb.org/45829 · Nota