CVE-2011-1329: Walrus Digit Walrack

Medium severity, CVSS 6.8. EPSS: 1.4% chance of exploitation in the next 30 days.

WalRack 1.x before 1.1.9 and 2.x before 2.0.7 does not properly restrict file uploads, which allows remote attackers to execute arbitrary PHP code via vectors involving a double extension, as demonstrated by a .php.zzz file.

Affected products

• Walrus Digit Walrack: version 1.0.1 only; version 1.1.1 only; version 1.1.2 only; version 1.1.3 only; version 1.1.4 only; version 1.1.5 only; …

Published 2011-05-31. Last modified 2026-06-16.