CVE-2003-0491: Mytutorials Tutorials

High severity, CVSS 7.5. EPSS: 2.2% chance of exploitation in the next 30 days.

The Tutorials 2.0 module in XOOPS and E-XOOPS allows remote attackers to execute arbitrary code by uploading a PHP file without a MIME image type, then directly accessing the uploaded file.

Affected products

• Mytutorials Tutorials: version 2.0 only

Published 2003-08-07. Last modified 2026-06-16.