CVE-2007-6668

admin/uploadgames.php in MySpace Content Zone (MCZ) 3.x does not require administrative privileges, which allows remote attackers to perform unrestricted file…

published January 8, 2008

CVSS
—
EPSS
6%
Percentile
93.6
In the wild
Unconfirmed
What it is

admin/uploadgames.php in MySpace Content Zone (MCZ) 3.x does not require administrative privileges, which allows remote attackers to perform unrestricted file uploads, as demonstrated by uploading (1) a .php file and (2) a .php%00.jpeg file.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.06356 · 93.6th percentile
Published
2008-01-08T02:00Z
EPSS history
Timeline
  • 08 JAN 02:00Z
    admin/uploadgames.php in MySpace Content Zone (MCZ) 3.x does not require administrative privileges, which allows remote attackers to perform unrestricted file…
    cvelistv5