CVE-2007-5736

Unrestricted file upload vulnerability in upload.php in SeeBlick 1.0 Beta allows remote attackers to upload arbitrary files via unspecified vectors. NOTE: these files are stored with .html extensions, so the scope of the attack might be limited to resource consumption and possibly XSS.

Score

CVSS 2.0 6.4 Medium

Status

Modified - cve@mitre.org

Published

2007-10-30

Last modified

2024-08-07

Weaknesses

CWE-20

Affected products

• Seeblick (Seeblick)

References

• http://osvdb.org/38922
• http://securityreason.com/securityalert/3324
• http://www.securityfocus.com/archive/1/482674/100/0/threaded