Vulnerabilities > CVE-2007-1552 - Unspecified vulnerability in Metaforum 0.513Beta
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
PARTIAL Integrity impact
PARTIAL Availability impact
PARTIAL Summary
Unrestricted file upload vulnerability in usercp.php in MetaForum 0.513 Beta restricts file types based on the MIME type in the Content-type HTTP header, which allows remote attackers to upload and execute arbitrary scripts via an image MIME type with a filename containing an executable extension such as .php.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 1 |
Exploit-Db
| description | MetaForum <= 0.513 Beta Remote File Upload Exploit. CVE-2007-1552. Webapps exploit for php platform |
| file | exploits/php/webapps/3516.php |
| id | EDB-ID:3516 |
| last seen | 2016-01-31 |
| modified | 2007-03-19 |
| platform | php |
| port | |
| published | 2007-03-19 |
| reporter | Gu1ll4um3r0m41n |
| source | https://www.exploit-db.com/download/3516/ |
| title | MetaForum <= 0.513 Beta Remote File Upload Exploit |
| type | webapps |
References
- http://osvdb.org/34523
- http://securityreason.com/securityalert/2454
- http://www.aeroxteam.fr/exploit-MetaForum-0.513b.txt
- http://www.securityfocus.com/archive/1/463178/100/0/threaded
- http://www.securityfocus.com/bid/23032
- https://exchange.xforce.ibmcloud.com/vulnerabilities/33097
- https://www.exploit-db.com/exploits/3516