CVE-2007-1155: Webspell

Medium severity, CVSS 4.6. EPSS: 1% chance of exploitation in the next 30 days.

Unrestricted file upload vulnerability in webSPELL allows remote authenticated administrators to upload and execute arbitrary PHP code via the add squad feature. NOTE: this issue may be an administrative feature, in which case this CVE may be REJECTED.

Affected products

• Webspell Webspell: any version

Published 2007-03-02. Last modified 2026-06-16.