Unscored CVE-2007-1155 EUVD-2007-1152GHSA-j8cr-mg4g-2h76

Unrestricted file upload vulnerability in webSPELL allows remote authenticated administrators to upload and execute arbitrary PHP code via …

Published Feb 27, 2007 · Updated Aug 7, 2024 · Assigned by mitre

Description

Unrestricted file upload vulnerability in webSPELL allows remote authenticated administrators to upload and execute arbitrary PHP code via the add squad feature. NOTE: this issue may be an administrative feature, in which case this CVE may be REJECTED.

References

webspell-addsquad-file-upload(32670) vdb-entry
2337 third-party-advisory
20070222 WebSpell > 4.0 Authentication Bypass and arbitrary code execution mailing-list