CVE-2007-3429

Published: Jun 27, 2007Modified: Apr 23, 2026

6.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability: 8.6 / Impact: 6.4

Source: NVD

Description

Unrestricted file upload vulnerability in signup.php in e107 0.7.8 and earlier, when photograph upload is enabled, allows remote attackers to upload and execute arbitrary PHP code via a filename with a double extension such as .php.jpg.

Affected (9)

Products: E107: E107

E107

1 product

E107

Configuration A

9 vulnerable

Vulnerable Software	Affected Versions
E107 E107	Version 0.7.1
E107 E107	Version 0.7.2
E107 E107	Version 0.7.3
E107 E107	Version 0.7.4
E107 E107	Version 0.7.5
E107 E107	Version 0.7.6
E107 E107	Version 0.7.7
E107 E107	Version 0.7.8
E107 E107	Version 0.7