Unrestricted File Upload in Uber Uploader 4.2 by Uber
CVE-2007-0123

Currently unrated

Key Information:

Vendor: Uber Uploader
Status: Uber Uploader
Vendor: CVE Published:; 9 January 2007

🔔 Create Uber Uploader Vulnerability Alert

What is CVE-2007-0123?

The Uber Uploader 4.2 has a vulnerability that allows remote attackers to upload arbitrary PHP scripts by exploiting the file naming convention. Specifically, attackers can bypass the security measures of the .php extension check by using a .phtml extension. This misconfiguration may lead to unauthorized execution of the uploaded scripts on server environments wherein the .phtml files are treated as executable PHP scripts, posing a significant security threat.

References

http://securityreason.com/securityalert/2116

third-party-advisoryx_refsource_SREASON

https://exchange.xforce.ibmcloud.com/vulnerabilities/31303

vdb-entryx_refsource_XF

http://www.securityfocus.com/archive/1/456045/100/0/threaded

mailing-listx_refsource_BUGTRAQ

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Jan 9, 2007
Vulnerability Reserved
Jan 8, 2007

CVE-2007-0123 Data

JSON