CVE-2007-5304

ELSEIF CMS Beta 0.6 - Stored Cross-Site Scripting via Multiple Parameters

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2007-5304.

AI-analyzed exploit summary This exploit demonstrates a file upload vulnerability in Else If CMS Beta 0.6, allowing an attacker to upload a malicious PHP shell via the 'swfupload/upload.php' endpoint. The exploit constructs a multipart/form-data POST request to bypass restrictions and achieve remote code execution.

Description

Multiple cross-site scripting (XSS) vulnerabilities in ELSEIF CMS Beta 0.6 allow remote attackers to inject arbitrary web script or HTML via the (1) repertimage parameter to utilisateurs/vousetesbannis.php, the (2) elseifvotetxtresultatduvote parameter to utilisateurs/votesresultats.php, and the (3) elseifforumtxtmenugeneraleduforum parameter to moduleajouter/depot/adminforum.php.

Exploits (1)

exploitdb WORKING POC
webappsphp
https://www.exploit-db.com/exploits/4490

This exploit demonstrates a file upload vulnerability in Else If CMS Beta 0.6, allowing an attacker to upload a malicious PHP shell via the 'swfupload/upload.php' endpoint. The exploit constructs a multipart/form-data POST request to bypass restrictions and achieve remote code execution.

Classification
Working Poc 95%
Attack Type
Rce
Complexity
Moderate
Reliability
Reliable
Target: Else If CMS Beta 0.6
No auth needed
Prerequisites: Network access to the target CMS · File upload endpoint accessible
devstral-2 · analyzed Feb 19, 2026 Full analysis →

References (8)

Core 8
Core References
Exploit vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/25951
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/37007
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://osvdb.org/38646
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://osvdb.org/38648
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://osvdb.org/38647
Third Party Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2007/3429
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/481683/100/0/threaded
Third Party Advisory third-party-advisory x_refsource_sreason
http://securityreason.com/securityalert/3204

Scores

EPSS 0.0376
EPSS Percentile 88.5%

Details

CWE
CWE-79
Status published
Products (1)
yannick_tanguy/else_if_cms 0.6-beta
Published Oct 09, 2007
Tracked Since Feb 18, 2026