|
|
CVE Reference: CVE-2007-2025 |
|
| NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE. | |
|
Original Page at CVE MITRE: CVE-2007-2025 |
|
|
Description: Unrestricted file upload vulnerability in the UpLoad feature (lib/plugin/UpLoad.php) in PhpWiki 1.3.11p1 allows remote attackers to upload arbitrary PHP files with a double extension, as demonstrated by .php.3, which is interpreted by Apache as being a valid PHP file. |
|
|
CVE Status: Candidate |
|
|
References: SAID Secunia Advisory: SA25307 Secunia Advisory: SA26784 MLIST http://www.nabble.com/Important-UpLoad-security-fix%21-was--Fwd%3A--phpwiki---Open-Discussion--RE%3A-upload-security-risk--t3543463.html MISC GENTOO http://www.gentoo.org/security/en/glsa/glsa-200705-16.xml DEBIAN http://www.debian.org/security/2007/dsa-1371 |
|
| Return to the previous page. |
