Unrated severityNVD Advisory· Published Mar 20, 2007· Updated Jun 16, 2026

CVE-2007-1549

Description

Unrestricted file upload vulnerability in gallery.php in phpx 3.5.15 allows remote attackers to upload and execute arbitrary PHP scripts via an addImage action, which places scripts into the gallery/shelties/ directory.

Affected products

Phpx/Phpx2 versions
cpe:2.3:a:phpx:phpx:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:phpx:phpx:*:*:*:*:*:*:*:*range: <=3.5.9
- (no CPE)range: =3.5.15

Patches

Vulnerability mechanics

References

securityreason.com/securityalert/2457nvd
www.securityfocus.com/archive/1/463192/100/0/threadednvd
www.securityfocus.com/bid/23033nvd
exchange.xforce.ibmcloud.com/vulnerabilities/33151nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000