Description
Unrestricted file upload vulnerability in signup.php in e107 0.7.8 and earlier, when photograph upload is enabled, allows remote attackers to upload and execute arbitrary PHP code via a filename with a double extension such as .php.jpg.
Remediation
References
Related Vulnerabilities
MyBB CVE-2008-3070 Vulnerability (CVE-2008-3070)
WordPress Plugin Active Extra Fields Cross-Site Scripting (1.0.1)
WordPress Plugin WP Live Chat Support Pro Unspecified Vulnerability (8.0.07)
Oracle Database Server CVE-2019-2571 Vulnerability (CVE-2019-2571)
WordPress Plugin Network Publisher 'networkpub_key' Parameter Cross-Site Scripting (5.0.1)