← Database

CVE-2007-5401

MEDIUM CVSS: 6.5 Published: 2008-01-09 Modified: 2026-06-16

Description

Unrestricted file upload vulnerability in uploadrequest.asp in Layton HelpBox 3.7.1 allows remote authenticated users to upload and execute arbitrary ASP files, related to not properly checking file extensions.

Affected Platforms

Layton Technology Helpbox

Weakness Type

CWE-264

References