CVE-2007-2182: Maran PHP Forum

Medium severity, CVSS 6.8. EPSS: 4.4% chance of exploitation in the next 30 days.

Unrestricted file upload vulnerability in forum_write.php in Maran PHP Forum allows remote attackers to upload and execute arbitrary PHP files via a trailing %00 in a filename in the page parameter.

Affected products

• Maran PHP Forum: any version

Published 2007-04-24. Last modified 2026-06-16.