CVEs-PoC/2007/CVE-2007-0123.md

CVE-2007-0123

Description

Unrestricted file upload vulnerability in Uber Uploader 4.2 allows remote attackers to upload and execute arbitrary PHP scripts by naming them with a .phtml extension, which bypasses the .php extension check but is still executable on some server configurations.

POC

Reference

• http://securityreason.com/securityalert/2116

Github

No PoCs found on GitHub currently.