CVE-2007-3932

uploadimg.php in the Expose RC35 and earlier (com_expose) component for Joomla!

published July 21, 2007

CVSS
—
EPSS
6%
Percentile
93.6
In the wild
Unconfirmed
What it is

uploadimg.php in the Expose RC35 and earlier (com_expose) component for Joomla! sends an error message but does not exit when it detects an attempt to upload a non-JPEG file, which allows remote attackers to upload and execute arbitrary PHP code in the img/ folder.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.06331 · 93.6th percentile
Published
2007-07-21T00:00Z
EPSS history
Timeline
  • 21 JUL 00:00Z
    uploadimg.php in the Expose RC35 and earlier (com_expose) component for Joomla!
    cvelistv5