Unscored CVE-2007-4371 EUVD-2007-4354GHSA-8p52-f87h-wxg3

Unrestricted file upload vulnerability in admin/pages/blog-add.php in Neuron Blog 1.1 allows remote attackers to upload and execute arbitra…

Published Aug 15, 2007 · Updated Aug 7, 2024 · Assigned by mitre

Description

Unrestricted file upload vulnerability in admin/pages/blog-add.php in Neuron Blog 1.1 allows remote attackers to upload and execute arbitrary PHP files in uploads/.

References

neuronblog-admin-file-upload(35982) vdb-entry
3016 third-party-advisory
20070813 Neuron Blog Admin Permission Bypass and Remote File Upload Vulnerability mailing-list
39602 vdb-entry