Unrated severityNVD Advisory· Published Dec 27, 2007· Updated Jun 16, 2026

CVE-2007-6527

Description

uploadimg.php in the Automatic Image Upload with Thumbnails (imgUpload) module 1.3.2 for PunBB only verifies the Content-type field of uploaded files, which allows remote attackers to upload and execute arbitrary content via a file with a (1) JPG, (2) GIF, or (3) PNG MIME type.

Affected products

Rickard Andersson/Punbb
cpe:2.3:a:rickard_andersson:punbb:1.3.3:*:*:*:*:*:*:*
Punbb/Punbbllm-fuzzy
Range: = 1.3.2

Patches

Vulnerability mechanics

References

secunia.com/advisories/28138nvdVendor Advisory
osvdb.org/42809nvd
www.fortconsult.net/images/pdf/advisories/punBB_imgUpload.pdfnvd
exchange.xforce.ibmcloud.com/vulnerabilities/39150nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000