PublicDate: 2007-04-13 18:19:00 UTC Candidate: CVE-2007-2024 References: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2024 Description: Unrestricted file upload vulnerability in the UpLoad feature (lib/plugin/UpLoad.php) in PhpWiki 1.3.x allows remote attackers to upload arbitrary PHP files with a (1) php3, (2) php4, or (3) php5 extension. Ubuntu-Description: Notes: Priority: untriaged Discovered-by: Assigned-to: CVSS: Bugs: dapper_phpwiki: ignored (reached end-of-life) edgy_phpwiki: needed (reached end-of-life) feisty_phpwiki: needed (reached end-of-life) gutsy_phpwiki: released (1.3.12p3-6.1) hardy_phpwiki: released (1.3.12p3-6.1) intrepid_phpwiki: released (1.3.12p3-6.1) jaunty_phpwiki: released (1.3.12p3-6.1) karmic_phpwiki: released (1.3.12p3-6.1) devel_phpwiki: released (1.3.12p3-6.1) upstream_phpwiki: needs-triage