CVE-2007-6479 | BDVDB-2026-28341 Detail

Description#

Unrestricted file upload vulnerability in the "My productions" component for main/auth/profile.php (aka the "My profile" page) in Dokeos 1.8.4 allows remote authenticated users to upload and execute arbitrary PHP files via a filename with a double extension, which can then be accessed through a URI under main/upload/users/.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12007-12-20Record published in the CVE List.
2. Version 22024-08-07Most recent update recorded in the CVE List.