PublicDate: 2007-04-13 18:19:00 UTC Candidate: CVE-2007-2025 References: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2025 Description: Unrestricted file upload vulnerability in the UpLoad feature (lib/plugin/UpLoad.php) in PhpWiki 1.3.11p1 allows remote attackers to upload arbitrary PHP files with a double extension, as demonstrated by .php.3, which is interpreted by Apache as being a valid PHP file. Ubuntu-Description: Notes: Priority: untriaged Discovered-by: Assigned-to: CVSS: Bugs: dapper_phpwiki: ignored (reached end-of-life) edgy_phpwiki: needed (reached end-of-life) feisty_phpwiki: needed (reached end-of-life) gutsy_phpwiki: released (1.3.12p3-6.1) hardy_phpwiki: released (1.3.12p3-6.1) intrepid_phpwiki: released (1.3.12p3-6.1) jaunty_phpwiki: released (1.3.12p3-6.1) karmic_phpwiki: released (1.3.12p3-6.1) devel_phpwiki: released (1.3.12p3-6.1) upstream_phpwiki: needs-triage