← Database

CVE-2003-0491

HIGH CVSS: 7.5 Published: 2003-08-07 Modified: 2026-06-16

Description

The Tutorials 2.0 module in XOOPS and E-XOOPS allows remote attackers to execute arbitrary code by uploading a PHP file without a MIME image type, then directly accessing the uploaded file.

Affected Platforms

Mytutorials Tutorials

Weakness Type

NVD-CWE-Other

References