CVE-2007-5733

no score yetEPSS 2.4%

Unrestricted file upload vulnerability in upload/upload.php in Japanese PHP Gallery Hosting, when Open directory mode is enabled, allows remote attackers to upload and execute arbitrary PHP code via a ServerPath parameter specifying a filename with a double extension. NOTE: some of these details are obtained from third party information.

EPSS: 2.4% chance of exploitation in the next 30 days; higher than 83% of CVEs (scores of 2026-10-31)
CWEs: CWE-20, CWE-94
Published: 2007-10-30
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

japanese_php_gallery_hosting:japanese_php_gallery_hosting

References

http://osvdb.org/39015
http://securityreason.com/securityalert/3322
http://www.securityfocus.com/archive/1/482676/100/0/threaded
http://www.securityfocus.com/bid/26179
http://osvdb.org/39015

Check your stack JSON