CVE-2007-0871
eXtremePow - Code Injection
Title source: llmDescription
Unrestricted file upload vulnerability in eXtremePow eXtreme File Hosting allows remote attackers to upload arbitrary PHP code via a filename with a double extension such as (1) .rar.php or (2) .zip.php.
Exploits (1)
exploitdb
WORKING POC
VERIFIED
by hamed bazargani · phpwebappsphp
https://www.exploit-db.com/exploits/29574
References (6)
Scores
EPSS
0.0476
EPSS Percentile
89.5%
Details
Status
published
Products (1)
extremepow/extreme_file_hosting
Published
Feb 12, 2007
Tracked Since
Feb 18, 2026