CVE-2007-4376: Szymon Kosok Best Top List

Medium severity, CVSS 6.8. EPSS: 1.2% chance of exploitation in the next 30 days.

Unrestricted file upload vulnerability in banner-upload.php in Szymon Kosok Best Top List allows remote attackers to upload and execute arbitrary PHP files in banners/.

Affected products

• Szymon Kosok Best Top List: up to and including 2.11

Published 2007-08-16. Last modified 2026-06-16.