CVE-2007-3292 Unrestricted file upload vulnerability in LiveCMS 3.4 and earlier allows remote attackers to upload and execute arbitrary PHP code by specifying a PHP file type in a parameter intended for "a small im...
HighCVSS 7.5
EPSS 2.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Unrestricted file upload vulnerability in LiveCMS 3.4 and earlier allows remote attackers to upload and execute arbitrary PHP code by specifying a PHP file type in a parameter intended for "a small image" associated with an article.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| livecms | = 3.0 | No fix listed |
| livecms | = 3.3 | No fix listed |
| livecms | = 3.3_rc1 | No fix listed |
| livecms | = 3.3_rc2 | No fix listed |
| livecms | = 3.4 | No fix listed |
| livecms | = 3.4a | No fix listed |
References
- 37492 vdb-entry
- 24580 vdb-entry
- livecms-articleimage-file-upload(35149) vdb-entry
- 4082 exploit