CVE-2007-3432 Unrestricted file upload vulnerability in admin/images.php in Pluxml 0.3.1 allows remote attackers to upload and execute arbitrary PHP code via a .jpg filename.
HighCVSS 7.5
EPSS 8.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Unrestricted file upload vulnerability in admin/images.php in Pluxml 0.3.1 allows remote attackers to upload and execute arbitrary PHP code via a .jpg filename.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| pluxml | = 0.3.1 | No fix listed |
References
- 42420 vdb-entry
- 20070624 Pluxml 0.3.1 Remote Code Execution Exploit mailing-list
- pluxml-images-file-upload(35016) vdb-entry
- 4096 exploit