PT-2007-2933 · Phpx · Phpx

Published 2007-03-20 · Updated 2018-10-16 · CVE-2007-1549

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions phpx version 3.5.15

Description The issue allows remote attackers to upload and execute arbitrary PHP scripts via an addImage action in the gallery.php file. This action places the uploaded scripts into the gallery/shelties/ directory.

Recommendations For phpx version 3.5.15, consider restricting access to the gallery.php file or disabling the addImage action to prevent the upload and execution of arbitrary PHP scripts until a patch is available.

Fix

Related Identifiers

CVE-2007-1549

Affected Products

Phpx

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2007-1549 · Security Note
• http://securityfocus.com/archive/1/463192/100/0/threaded · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/33151 · Note
• http://securityreason.com/securityalert/2457 · Note
• http://securityfocus.com/bid/23033 · Note