PT-2007-5698 · Phphq.Net · Phphq.Net Phuploader

Published 2007-08-25 · Updated 2008-11-15 · CVE-2007-4527

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions phphq.Net phUploader version 1.2

Description The issue concerns an unrestricted file upload vulnerability in the phUploader.php file. This allows remote attackers to upload and execute arbitrary code. The exact vectors used for the attack are not specified.

Recommendations For version 1.2, consider restricting or disabling the file upload functionality in phUploader.php until a fix is available. As a temporary workaround, restrict access to the phUploader.php file to minimize the risk of exploitation.

Exploit

Fix

Related Identifiers

CVE-2007-4527

Affected Products

Phphq.Net Phuploader

References · 4

• 🔥 https://exploit-db.com/exploits/10574 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2007-4527 · Security Note
• http://securityfocus.com/bid/25405 · Note
• http://osvdb.org/45829 · Note