CVE-2014-7260: Ultrapop I-Httpd

High severity, CVSS 7.5. EPSS: 2.1% chance of exploitation in the next 30 days.

The Server Side Includes (SSI) implementation in the File Upload BBS component in ULTRAPOP.JP i-HTTPD allows remote attackers to execute arbitrary commands by uploading files containing commands in SSI directives.

Affected products

• Ultrapop I-Httpd: affected versions not specified

Published 2014-12-12. Last modified 2026-06-17.