CVE-2007-3292

Published: Jun 20, 2007Modified: Apr 23, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Unrestricted file upload vulnerability in LiveCMS 3.4 and earlier allows remote attackers to upload and execute arbitrary PHP code by specifying a PHP file type in a parameter intended for "a small image" associated with an article.

Affected (6)

Products: Livecms: Livecms

Livecms

1 product

Livecms

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Livecms Livecms	Version 3.0
Livecms Livecms	Version 3.3
Livecms Livecms	Version 3.3_rc1
Livecms Livecms	Version 3.3_rc2
Livecms Livecms	Version 3.4
Livecms Livecms	Version 3.4a