CVE-2007-1155

Published: Mar 2, 2007Modified: Apr 23, 2026

4.6

Vector

AV:N/AC:H/Au:S/C:P/I:P/A:P

Exploitability: 3.9 / Impact: 6.4

Source: NVD

Description

Unrestricted file upload vulnerability in webSPELL allows remote authenticated administrators to upload and execute arbitrary PHP code via the add squad feature. NOTE: this issue may be an administrative feature, in which case this CVE may be REJECTED.

Affected (1)

Products: Webspell: Webspell

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Webspell Webspell	All versions

Related CWEs

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (6)

http://securityreason.com/securityalert/2337

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/460937/100/0/threaded

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/32670

Source: cve@mitre.org

http://securityreason.com/securityalert/2337

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/archive/1/460937/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/32670

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.