CVE-2008-0373: PHP f1 Maxs File Uploader

High severity, CVSS 7.5. EPSS: 2.2% chance of exploitation in the next 30 days.

Unrestricted file upload vulnerability in PHP F1 Max's File Uploader allows remote attackers to upload and execute arbitrary PHP files.

Affected products

• PHP f1 Maxs File Uploader: any version

Published 2008-01-22. Last modified 2026-06-16.