CVE-2007-2024

{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2007-04-12T00:00:00.000Z", "descriptions": [{"lang": "en", "value": "Unrestricted file upload vulnerability in the UpLoad feature (lib/plugin/UpLoad.php) in PhpWiki 1.3.x allows remote attackers to upload arbitrary PHP files with a (1) php3, (2) php4, or (3) php5 extension."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2018-10-16T14:57:01.000Z", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"name": "20070412 Critical phpwiki c99shell exploit", "tags": ["mailing-list", "x_refsource_BUGTRAQ"], "url": "http://www.securityfocus.com/archive/1/465489/100/0/threaded"}, {"name": "ADV-2007-1400", "tags": ["vdb-entry", "x_refsource_VUPEN"], "url": "http://www.vupen.com/english/advisories/2007/1400"}, {"name": "20070412 RE: Critical phpwiki c99shell exploit", "tags": ["mailing-list", "x_refsource_BUGTRAQ"], "url": "http://www.securityfocus.com/archive/1/465550/100/0/threaded"}, {"name": "24888", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/24888"}, {"name": "VU#914793", "tags": ["third-party-advisory", "x_refsource_CERT-VN"], "url": "http://www.kb.cert.org/vuls/id/914793"}, {"name": "DSA-1371", "tags": ["vendor-advisory", "x_refsource_DEBIAN"], "url": "http://www.debian.org/security/2007/dsa-1371"}, {"name": "26784", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/26784"}, {"name": "GLSA-200705-16", "tags": ["vendor-advisory", "x_refsource_GENTOO"], "url": "http://www.gentoo.org/security/en/glsa/glsa-200705-16.xml"}, {"name": "20070412 Re: Critical phpwiki c99shell exploit", "tags": ["mailing-list", "x_refsource_BUGTRAQ"], "url": "http://www.securityfocus.com/archive/1/465514/100/0/threaded"}, {"name": "[phpwiki-talk] 20070413 Fwd: Critical phpwiki c99shell exploit", "tags": ["mailing-list", "x_refsource_MLIST"], "url": "http://www.nabble.com/Fwd%3A-Critical-phpwiki-c99shell-exploit-t3571197.html"}, {"name": "25307", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/25307"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2007-2024", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Unrestricted file upload vulnerability in the UpLoad feature (lib/plugin/UpLoad.php) in PhpWiki 1.3.x allows remote attackers to upload arbitrary PHP files with a (1) php3, (2) php4, or (3) php5 extension."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "20070412 Critical phpwiki c99shell exploit", "refsource": "BUGTRAQ", "url": "http://www.securityfocus.com/archive/1/465489/100/0/threaded"}, {"name": "ADV-2007-1400", "refsource": "VUPEN", "url": "http://www.vupen.com/english/advisories/2007/1400"}, {"name": "20070412 RE: Critical phpwiki c99shell exploit", "refsource": "BUGTRAQ", "url": "http://www.securityfocus.com/archive/1/465550/100/0/threaded"}, {"name": "24888", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/24888"}, {"name": "VU#914793", "refsource": "CERT-VN", "url": "http://www.kb.cert.org/vuls/id/914793"}, {"name": "DSA-1371", "refsource": "DEBIAN", "url": "http://www.debian.org/security/2007/dsa-1371"}, {"name": "26784", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/26784"}, {"name": "GLSA-200705-16", "refsource": "GENTOO", "url": "http://www.gentoo.org/security/en/glsa/glsa-200705-16.xml"}, {"name": "20070412 Re: Critical phpwiki c99shell exploit", "refsource": "BUGTRAQ", "url": "http://www.securityfocus.com/archive/1/465514/100/0/threaded"}, {"name": "[phpwiki-talk] 20070413 Fwd: Critical phpwiki c99shell exploit", "refsource": "MLIST", "url": "http://www.nabble.com/Fwd%3A-Critical-phpwiki-c99shell-exploit-t3571197.html"}, {"name": "25307", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/25307"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-07T13:13:42.022Z"}, "title": "CVE Program Container", "references": [{"name": "20070412 Critical phpwiki c99shell exploit", "tags": ["mailing-list", "x_refsource_BUGTRAQ", "x_transferred"], "url": "http://www.securityfocus.com/archive/1/465489/100/0/threaded"}, {"name": "ADV-2007-1400", "tags": ["vdb-entry", "x_refsource_VUPEN", "x_transferred"], "url": "http://www.vupen.com/english/advisories/2007/1400"}, {"name": "20070412 RE: Critical phpwiki c99shell exploit", "tags": ["mailing-list", "x_refsource_BUGTRAQ", "x_transferred"], "url": "http://www.securityfocus.com/archive/1/465550/100/0/threaded"}, {"name": "24888", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/24888"}, {"name": "VU#914793", "tags": ["third-party-advisory", "x_refsource_CERT-VN", "x_transferred"], "url": "http://www.kb.cert.org/vuls/id/914793"}, {"name": "DSA-1371", "tags": ["vendor-advisory", "x_refsource_DEBIAN", "x_transferred"], "url": "http://www.debian.org/security/2007/dsa-1371"}, {"name": "26784", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/26784"}, {"name": "GLSA-200705-16", "tags": ["vendor-advisory", "x_refsource_GENTOO", "x_transferred"], "url": "http://www.gentoo.org/security/en/glsa/glsa-200705-16.xml"}, {"name": "20070412 Re: Critical phpwiki c99shell exploit", "tags": ["mailing-list", "x_refsource_BUGTRAQ", "x_transferred"], "url": "http://www.securityfocus.com/archive/1/465514/100/0/threaded"}, {"name": "[phpwiki-talk] 20070413 Fwd: Critical phpwiki c99shell exploit", "tags": ["mailing-list", "x_refsource_MLIST", "x_transferred"], "url": "http://www.nabble.com/Fwd%3A-Critical-phpwiki-c99shell-exploit-t3571197.html"}, {"name": "25307", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/25307"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2007-2024", "datePublished": "2007-04-13T18:00:00.000Z", "dateReserved": "2007-04-13T00:00:00.000Z", "dateUpdated": "2024-08-07T13:13:42.022Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{}

{"affected": [{"affectedData": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "source": "cve@mitre.org"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:phpwiki:phpwiki:1.3.x:*:*:*:*:*:*:*", "matchCriteriaId": "58B94404-6C32-454A-9E42-5A07D6501A0A", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Unrestricted file upload vulnerability in the UpLoad feature (lib/plugin/UpLoad.php) in PhpWiki 1.3.x allows remote attackers to upload arbitrary PHP files with a (1) php3, (2) php4, or (3) php5 extension."}, {"lang": "es", "value": "Vulnerabilidad de actualizaci\u00f3n de archivo en la caracter\u00edstica de actualizaci\u00f3n (lib/plugin/UpLoad.php) en PhpWiki 1.3.x permite a atacantes remotos actualizar archivos PHP de su elecci\u00f3n con extensiones (1) php3, (2) php4, o (3) php5."}], "evaluatorImpact": "\"Successful exploitation requires being logged in and that the webserver is configured to execute PHP scripts with such extensions. In the default configuration of PhpWiki, no registration or validation is necessary to log in.\"\r\n", "id": "CVE-2007-2024", "lastModified": "2026-06-16T22:38:46.227", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 6.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 8.6, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": true, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}]}, "published": "2007-04-13T18:19:00.000", "references": [{"source": "cve@mitre.org", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/24888"}, {"source": "cve@mitre.org", "url": "http://secunia.com/advisories/25307"}, {"source": "cve@mitre.org", "url": "http://secunia.com/advisories/26784"}, {"source": "cve@mitre.org", "url": "http://www.debian.org/security/2007/dsa-1371"}, {"source": "cve@mitre.org", "url": "http://www.gentoo.org/security/en/glsa/glsa-200705-16.xml"}, {"source": "cve@mitre.org", "tags": ["US Government Resource"], "url": "http://www.kb.cert.org/vuls/id/914793"}, {"source": "cve@mitre.org", "url": "http://www.nabble.com/Fwd%3A-Critical-phpwiki-c99shell-exploit-t3571197.html"}, {"source": "cve@mitre.org", "url": "http://www.securityfocus.com/archive/1/465489/100/0/threaded"}, {"source": "cve@mitre.org", "url": "http://www.securityfocus.com/archive/1/465514/100/0/threaded"}, {"source": "cve@mitre.org", "url": "http://www.securityfocus.com/archive/1/465550/100/0/threaded"}, {"source": "cve@mitre.org", "url": "http://www.vupen.com/english/advisories/2007/1400"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/24888"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://secunia.com/advisories/25307"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://secunia.com/advisories/26784"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.debian.org/security/2007/dsa-1371"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.gentoo.org/security/en/glsa/glsa-200705-16.xml"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["US Government Resource"], "url": "http://www.kb.cert.org/vuls/id/914793"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.nabble.com/Fwd%3A-Critical-phpwiki-c99shell-exploit-t3571197.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securityfocus.com/archive/1/465489/100/0/threaded"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securityfocus.com/archive/1/465514/100/0/threaded"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securityfocus.com/archive/1/465550/100/0/threaded"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.vupen.com/english/advisories/2007/1400"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-Other"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{}

{}