Back to Database
Status published
Medium
CVE-2007-2024
Unrestricted file upload vulnerability in the UpLoad feature (lib/plugin/UpLoad.php) in...
Vulnerability Description
Unrestricted file upload vulnerability in the UpLoad feature (lib/plugin/UpLoad.php) in PhpWiki 1.3.x allows remote attackers to upload arbitrary PHP files with a (1) php3, (2) php4, or (3) php5 extension.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2007-2024
Credits & Attribution
No credits recorded in the NVD database.
References
- http://www.securityfocus.com/archive/1/465489/100/0/threaded
- http://www.vupen.com/english/advisories/2007/1400
- http://www.securityfocus.com/archive/1/465550/100/0/threaded
- http://secunia.com/advisories/24888
- http://www.kb.cert.org/vuls/id/914793
- http://www.debian.org/security/2007/dsa-1371
- http://secunia.com/advisories/26784
- http://www.gentoo.org/security/en/glsa/glsa-200705-16.xml
- http://www.securityfocus.com/archive/1/465514/100/0/threaded
- http://www.nabble.com/Fwd%3A-Critical-phpwiki-c99shell-exploit-t3571197.html
- http://secunia.com/advisories/25307
Affected Vendor
phpwiki
View all reports →Affected Software
phpwiki
Vulnerable Versions:
1.3.x
Timeline
Official Publish:
April 13th, 2007
Last Modified:
August 7th, 2024
Added to House:
July 18th, 2026
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.