CVE-2007-4026

Published: Jul 26, 2007Modified: Apr 23, 2026

6.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability: 8.6 / Impact: 6.4

Source: NVD

Description

epesi framework before 0.8.6 does not properly verify file extensions, which allows remote attackers to upload and execute arbitrary PHP code via unspecified vectors involving the gallery images upload feature. NOTE: some of these details are obtained from third party information.

Affected (1)

Products: Telaxus Llc: Epesi

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Telaxus Llc Epesi	version ≤ 0.8.5

References (8)

http://osvdb.org/38600

Source: cve@mitre.org

http://secunia.com/advisories/26175

Source: cve@mitre.org

Vendor Advisory

http://sourceforge.net/project/shownotes.php?release_id=527102

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/35596

Source: cve@mitre.org

http://osvdb.org/38600

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/26175

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://sourceforge.net/project/shownotes.php?release_id=527102

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/35596

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.