CVE-2007-1150 Unrestricted file upload vulnerability in LoveCMS 1.4 allows remote authenticated administrators to upload arbitrary files to /modules/content/pictures/tmp/.
LowCVSS 3.6
EPSS 1.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Unrestricted file upload vulnerability in LoveCMS 1.4 allows remote authenticated administrators to upload arbitrary files to /modules/content/pictures/tmp/.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| lovecms | = 1.4 | No fix listed |
References
- 33519 vdb-entry
- 2338 third-party-advisory
- 20070222 LoveCMS 1.4 multiple vulnerabilities mailing-list
- 22675 exploit vdb-entry