Unrestricted file upload vulnerability in Cromosoft Simple Plantilla PHP (SPP) allows remote attackers to upload arbitrary scripts via a filename with a double extension.
References
Configurations
Information
Published : 2007-03-02 13:18
Updated : 2018-10-16 09:36
NVD link : CVE-2007-1139
Mitre link : CVE-2007-1139
JSON object : View
CWE
CWE-94
Improper Control of Generation of Code ('Code Injection')
Products Affected
cromosoft
- simple_plantilla_php