CVE-2007-5188

no score yetEPSS 2.4%

Unspecified vulnerability in the XOOPS uploader class in Xoops 2.0.17.1-RC1 and earlier allows remote attackers to upload arbitrary files via unspecified vectors related to improper upload configuration settings in class/uploader.php and class/mimetypes.inc.php, possibly an incomplete blacklist that omits the .php4 extension.

EPSS: 2.4% chance of exploitation in the next 30 days; higher than 84% of CVEs (scores of 2026-10-31)
Published: 2007-10-03
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

xoops:xoops

References

http://osvdb.org/41386
http://secunia.com/advisories/27006
http://sourceforge.net/project/shownotes.php?group_id=41586&release_id=543338
http://www.securityfocus.com/bid/25878
http://www.vupen.com/english/advisories/2007/3315

Check your stack JSON