← Database

CVE-2007-1155

MEDIUM CVSS: 4.6 Published: 2007-03-02 Modified: 2026-06-16

Description

Unrestricted file upload vulnerability in webSPELL allows remote authenticated administrators to upload and execute arbitrary PHP code via the add squad feature. NOTE: this issue may be an administrative feature, in which case this CVE may be REJECTED.

Affected Platforms

Webspell Webspell

Weakness Type

CWE-20

References