CVE-2007-0871 Unrestricted file upload vulnerability in eXtremePow eXtreme File Hosting allows remote attackers to upload arbitrary PHP code via a filename with a double extension such as (1) .rar.php or (2) .zip.p...
HighCVSS 7.5
EPSS 3.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Unrestricted file upload vulnerability in eXtremePow eXtreme File Hosting allows remote attackers to upload arbitrary PHP code via a filename with a double extension such as (1) .rar.php or (2) .zip.php.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| extremepow extreme file hosting | All versions | No fix listed |
References
- 33181 vdb-entry
- 24088 third-party-advisory
- 2231 third-party-advisory
- 20070209 eXtreme File Hosting remote file upload vulnerability mailing-list
- 22498 exploit vdb-entry
- extremefilehosting-compressed-file-upload(32435) vdb-entry