CVE-2007-5720

Unrestricted file upload vulnerability in the profiles script in ProfileCMS 1.0 allows remote attackers to upload and execute arbitrary PHP code via unspecified vectors involving creation of a profile.

CVSS v2.0

6.8 MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:P

EPSS

1.96% chance of exploitation in the next 30 days, 79th percentile

Published

2007-10-30

Updated

2024-08-07

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/4586

References

• CVE Record
• NVD entry

Related

• CVE-2007-5719
• CVE-2007-5721
• CVE-2007-5711
• CVE-2007-5722
• CVE-2007-5710
• CVE-2007-5724