Unscored CVE-2007-1139 EUVD-2007-1136GHSA-qm9j-8489-27qv

Unrestricted file upload vulnerability in Cromosoft Simple Plantilla PHP (SPP) allows remote attackers to upload arbitrary scripts via a fi…

Published Feb 27, 2007 · Updated Aug 7, 2024 · Assigned by mitre

Description

Unrestricted file upload vulnerability in Cromosoft Simple Plantilla PHP (SPP) allows remote attackers to upload arbitrary scripts via a filename with a double extension.

References

20070222 Plantilla PHP Simple mailing-list
2332 third-party-advisory
22669 vdb-entry
33139 vdb-entry