CVE-2007-1552
MetaForum 0.513 Beta - Unauthenticated Arbitrary File Upload via usercp.php MIME Type Bypass
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2007-1552. PoCs published by Gu1ll4um3r0m41n.
AI-analyzed exploit summary This exploit leverages a file upload vulnerability in MetaForum <= 0.513 Beta by faking the MIME type of a PHP file to bypass validation. It authenticates, uploads a malicious PHP file disguised as an image, and provides a URL to access the uploaded file.
Description
Unrestricted file upload vulnerability in usercp.php in MetaForum 0.513 Beta restricts file types based on the MIME type in the Content-type HTTP header, which allows remote attackers to upload and execute arbitrary scripts via an image MIME type with a filename containing an executable extension such as .php.
Exploits (1)
This exploit leverages a file upload vulnerability in MetaForum <= 0.513 Beta by faking the MIME type of a PHP file to bypass validation. It authenticates, uploads a malicious PHP file disguised as an image, and provides a URL to access the uploaded file.