← Database

CVE-2005-0743

HIGH CVSS: 7.5 Published: 2005-05-02 Modified: 2026-06-16

Description

The custom avatar uploading feature (uploader.php) for XOOPS 2.0.9.2 and earlier allows remote attackers to upload arbitrary PHP scripts, whose file extensions are not filtered.

Affected Platforms

Xoops Xoops

Weakness Type

NVD-CWE-Other

References