Unrated severityNVD Advisory· Published Oct 30, 2007· Updated Apr 23, 2026
CVE-2007-5733
CVE-2007-5733
Description
Unrestricted file upload vulnerability in upload/upload.php in Japanese PHP Gallery Hosting, when Open directory mode is enabled, allows remote attackers to upload and execute arbitrary PHP code via a ServerPath parameter specifying a filename with a double extension. NOTE: some of these details are obtained from third party information.
Affected products
1- cpe:2.3:a:japanese_php_gallery_hosting:japanese_php_gallery_hosting:*:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
4News mentions
0No linked articles in our index yet.