CVE-2007-1097

no score yetEPSS 2.4%

Unrestricted file upload vulnerability in the onAttachFiles function in the upload tool (inc/lib/attachment.lib.php) in Wiclear before 0.11.1 allows remote attackers to upload and execute arbitrary PHP code via unspecified vectors related to filename validation. NOTE: some details were obtained from third party information.

EPSS: 2.4% chance of exploitation in the next 30 days; higher than 83% of CVEs (scores of 2026-10-31)
CWE: CWE-20
Published: 2007-02-26
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

wiclear:wiclear

References

http://osvdb.org/33598
http://secunia.com/advisories/24286
http://wiclear.free.fr/?Download
http://www.vupen.com/english/advisories/2007/0792
https://exchange.xforce.ibmcloud.com/vulnerabilities/32757

Check your stack JSON