CVE-2007-5734 Unrestricted file upload vulnerability in eFileMan 7.1.0.87-88 allows remote attackers to upload arbitrary files, with "uploads/upload_file." destination filenames, via unspecified vectors to upload.c...
MediumCVSS 6.4
EPSS 1.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Unrestricted file upload vulnerability in eFileMan 7.1.0.87-88 allows remote attackers to upload arbitrary files, with "uploads/upload_file." destination filenames, via unspecified vectors to upload.cgi, accessed from upload.html.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| efileman | = 7.1.0.87_88 | No fix listed |
References
- 39013 vdb-entry
- 3323 third-party-advisory
- 20071023 [Vulz] eFileMan 7.x Multiple Vulnerabilities by Xcross87 mailing-list
- 26184 vdb-entry