CVE-2007-3199: American Financing Link Request Contact Form

High severity, CVSS 7.5. EPSS: 3% chance of exploitation in the next 30 days.

Unrestricted file upload vulnerability in Link Request Contact Form 3.4 allows remote attackers to execute arbitrary PHP code by uploading a file with a .php extension and an image content type, as demonstrated by image/jpeg.

Affected products

• American Financing Link Request Contact Form: version 3.4 only

Published 2007-06-12. Last modified 2026-06-16.