CVE-2007-2024

Unrestricted file upload vulnerability in the UpLoad feature (lib/plugin/UpLoad.php) in PhpWiki 1.3.x allows remote attackers to upload arbitrary PHP files with a (1) php3, (2) php4, or (3) php5 extension.

• http://secunia.com/advisories/24888Vendor Advisory
• http://secunia.com/advisories/25307
• http://secunia.com/advisories/26784
• http://www.debian.org/security/2007/dsa-1371
• http://www.gentoo.org/security/en/glsa/glsa-200705-16.xml
• http://www.kb.cert.org/vuls/id/914793US Government Resource
• http://www.nabble.com/Fwd%3A-Critical-phpwiki-c99shell-exploit-t3571197.html
• http://www.securityfocus.com/archive/1/465489/100/0/threaded
• http://www.securityfocus.com/archive/1/465514/100/0/threaded
• http://www.securityfocus.com/archive/1/465550/100/0/threaded
• http://www.vupen.com/english/advisories/2007/1400
• http://secunia.com/advisories/24888Vendor Advisory
• http://secunia.com/advisories/25307
• http://secunia.com/advisories/26784
• http://www.debian.org/security/2007/dsa-1371
• http://www.gentoo.org/security/en/glsa/glsa-200705-16.xml
• http://www.kb.cert.org/vuls/id/914793US Government Resource
• http://www.nabble.com/Fwd%3A-Critical-phpwiki-c99shell-exploit-t3571197.html
• http://www.securityfocus.com/archive/1/465489/100/0/threaded
• http://www.securityfocus.com/archive/1/465514/100/0/threaded
• http://www.securityfocus.com/archive/1/465550/100/0/threaded
• http://www.vupen.com/english/advisories/2007/1400

Published

Apr 13, 2007

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2007-2018SQL injection vulnerability in msg.php in AlstraSoft Video S…
• CVE-2007-2019PHP remote file inclusion vulnerability in init.gallery.php …
• CVE-2007-2020Unspecified vulnerability in administration.php in xodagalle…9.8
• CVE-2007-2021Multiple PHP remote file inclusion vulnerabilities in Pineap…
• CVE-2007-2022Adobe Macromedia Flash Player 7 and 9, when used with Opera …
• CVE-2007-2023USB20.dll in Secustick USB flash drive decouples the authori…
• CVE-2007-2025Unrestricted file upload vulnerability in the UpLoad feature…
• CVE-2007-2026The gnu regular expression code in file 4.20 allows context-…
• CVE-2007-2027Untrusted search path vulnerability in the add_filename_to_s…
• CVE-2007-2028Memory leak in freeRADIUS 1.1.5 and earlier allows remote at…
• CVE-2007-2029File descriptor leak in the PDF handler in Clam AntiVirus (C…
• CVE-2007-2030lharc.c in lha does not securely create temporary files, whi…