CVE-2007-6527
rickard andersson punbb: no CVSS score yet. EPSS 1.1% chance of exploitation in the next 30 days.
uploadimg.php in the Automatic Image Upload with Thumbnails (imgUpload) module 1.3.2 for PunBB only verifies the Content-type field of uploaded files, which allows remote attackers to upload and execute arbitrary content via a file with a (1) JPG, (2) GIF, or (3) PNG MIME type.
- EPSS
- 1.1% chance of exploitation in the next 30 days; higher than 64% of CVEs (scores of 2026-11-01)
- CWE
- CWE-20
- Published
- Modified
- Record from
- the NVD, synced