Unscored CVE-2007-2214 EUVD-2007-2209GHSA-jjp5-x4p5-qff6

Unrestricted file upload vulnerability in includes/upload_file.php in DmCMS allows remote attackers to upload arbitrary PHP scripts by plac…

Published Apr 24, 2007 · Updated Aug 7, 2024 · Assigned by mitre

Description

Unrestricted file upload vulnerability in includes/upload_file.php in DmCMS allows remote attackers to upload arbitrary PHP scripts by placing a script's contents in both the File2 and File3 parameters, and sending a ok.php?do=act Referer.

References

35636 vdb-entry
20070423 DmCMS Shell Uploading mailing-list
ADV-2007-1516 vdb-entry
2605 third-party-advisory
23628 vdb-entry