CVE-2007-0871

EPSS 2.9%

Unrestricted file upload vulnerability in eXtremePow eXtreme File Hosting allows remote attackers to upload arbitrary PHP code via a filename with a double extension such as (1) .rar.php or (2) .zip.php.

Affected products

n/a · n/a

public PoCs found — 1

exploitdbwww.exploit-db.com/exploits/29574unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://osvdb.org/33181 http://secunia.com/advisories/24088 http://securityreason.com/securityalert/2231 https://exchange.xforce.ibmcloud.com/vulnerabilities/32435 http://www.securityfocus.com/archive/1/459562/100/0/threaded http://www.securityfocus.com/bid/22498