CVE-2007-2024: Phpwiki

Medium severity, CVSS 6.8. EPSS: 3.3% chance of exploitation in the next 30 days.

Unrestricted file upload vulnerability in the UpLoad feature (lib/plugin/UpLoad.php) in PhpWiki 1.3.x allows remote attackers to upload arbitrary PHP files with a (1) php3, (2) php4, or (3) php5 extension.

Affected products

• Phpwiki Phpwiki: version 1.3.x only

Published 2007-04-13. Last modified 2026-06-16.