CVE-2007-5720 Unrestricted file upload vulnerability in the profiles script in ProfileCMS 1.0 allows remote attackers to upload and execute arbitrary PHP code via unspecified vectors involving creation of a profile...
MediumCVSS 6.8
EPSS 2.0%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Unrestricted file upload vulnerability in the profiles script in ProfileCMS 1.0 allows remote attackers to upload and execute arbitrary PHP code via unspecified vectors involving creation of a profile.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| profilecms | = 1.0 | No fix listed |
References
- 45297 vdb-entry
- 26242 vdb-entry
- profilecms-profile-file-upload(38185) vdb-entry
- 4586 exploit