CVE-2007-3932

EPSS 6.3%

uploadimg.php in the Expose RC35 and earlier (com_expose) component for Joomla! sends an error message but does not exit when it detects an attempt to upload a non-JPEG file, which allows remote attackers to upload and execute arbitrary PHP code in the img/ folder.

Affected products

n/a · n/a

public PoCs found — 1

cve_referencewww.exploit-db.com/exploits/4194unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://osvdb.org/41262 https://exchange.xforce.ibmcloud.com/vulnerabilities/35488 https://www.exploit-db.com/exploits/4194 http://www.attrition.org/pipermail/vim/2007-July/001717.html http://www.securityfocus.com/bid/24958