← Database

CVE-2007-3403

HIGH CVSS: 7.5 Published: 2007-06-26 Modified: 2026-06-16

Description

Unrestricted file upload vulnerability in upload.php in dreamLog (aka dreamblog) 0.5 allows remote attackers to upload and execute arbitrary PHP code in uploads/images/ via the uploadedFile[] parameter.

Affected Platforms

Dreamlog Dreamlog

Weakness Type

NVD-CWE-Other

References