CVE-2007-3403 Unrestricted file upload vulnerability in upload.php in dreamLog (aka dreamblog) 0.5 allows remote attackers to upload and execute arbitrary PHP code in uploads/images/ via the uploadedFile[] paramete...
HighCVSS 7.5
EPSS 2.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Unrestricted file upload vulnerability in upload.php in dreamLog (aka dreamblog) 0.5 allows remote attackers to upload and execute arbitrary PHP code in uploads/images/ via the uploadedFile[] parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| dreamlog | = 0.5 | No fix listed |
References
- 45385 vdb-entry
- 24639 vdb-entry
- ADV-2007-2326 vdb-entry
- dreamlog-upload-file-upload(35054) vdb-entry
- 4106 exploit