Vulnerabilities > CVE-2007-3432 - File-Upload vulnerability in Pluxml 0.3.1

047910
CVSS 7.5 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
PARTIAL
Availability impact
PARTIAL
network
low complexity
pluxml
exploit available
NVD
Published: 2007-06-27
Updated: 2018-10-16

Summary

Unrestricted file upload vulnerability in admin/images.php in Pluxml 0.3.1 allows remote attackers to upload and execute arbitrary PHP code via a .jpg filename.

Vulnerable Configurations

Part Description Count
Application
Pluxml
1

Exploit-Db

descriptionPluxml 0.3.1 Remote Code Execution Exploit. CVE-2007-3432,CVE-2007-3542. Webapps exploit for php platform
fileexploits/php/webapps/4096.php
idEDB-ID:4096
last seen2016-01-31
modified2007-06-24
platformphp
port
published2007-06-24
reporterDarkFig
sourcehttps://www.exploit-db.com/download/4096/
titlePluxml 0.3.1 - Remote Code Execution Exploit
typewebapps

References