CVE-2003-0491

The Tutorials 2.0 module in XOOPS and E-XOOPS allows remote attackers to execute arbitrary code by uploading a PHP file without a MIME image type, then directly accessing the uploaded file.

Score

CVSS 2.0 7.5 High

Status

Modified - cve@mitre.org

Published

2003-08-07

Last modified

2024-08-08

Affected products

• Tutorials (Mytutorials)

References

• http://marc.info/?l=vuln-dev&m=105577873506147&w=2