CVE-2007-5188: Xoops

High severity, CVSS 7.5. EPSS: 2.4% chance of exploitation in the next 30 days.

Unspecified vulnerability in the XOOPS uploader class in Xoops 2.0.17.1-RC1 and earlier allows remote attackers to upload arbitrary files via unspecified vectors related to improper upload configuration settings in class/uploader.php and class/mimetypes.inc.php, possibly an incomplete blacklist that omits the .php4 extension.

Affected products

• Xoops Xoops: up to and including 2.0.17.1-rc1

Published 2007-10-03. Last modified 2026-06-16.