CVE-2007-1129: Mtcms

High severity, CVSS 7.5. EPSS: 1.4% chance of exploitation in the next 30 days.

Multiple unrestricted file upload vulnerabilities in MTCMS 3.2 allow remote attackers to upload and execute files via (1) an avatar upload in an add_down action, or (2) an add_link action.

Affected products

• Mtcms Mtcms: version 3.2 only

Published 2007-02-27. Last modified 2026-06-16.