CVE-2007-1155: Input Validation

Published Feb 27, 2007

Updated

Unrestricted file upload vulnerability in webSPELL allows remote authenticated administrators to upload and execute arbitrary PHP code via the add squad feature. NOTE: this issue may be an administrative feature, in which case this CVE may be REJECTED.

Affected Software

1 affected component

webSPELL Webspell

Event History

Feb 27, 2007

CVE Published

via MITRE·11:00 PM

Data Sourced

via MITRE·11:00 PM

Description

Mar 2, 2007

Rejected

09:18 PM

Frequently Asked Questions

What is the severity of CVE-2007-1155?

CVE-2007-1155 is considered a high severity vulnerability due to its potential to allow remote code execution.

How do I fix CVE-2007-1155?

To mitigate CVE-2007-1155, ensure that the file upload functionality is properly secured and restrict the types of files that can be uploaded.

Who is affected by CVE-2007-1155?

CVE-2007-1155 affects authenticated administrators using the webSPELL platform.

What type of attack is possible with CVE-2007-1155?

CVE-2007-1155 allows for arbitrary PHP code execution which could lead to full system compromise.

Is CVE-2007-1155 designed as a feature or a vulnerability?

CVE-2007-1155 may be interpreted as an administrative feature, but it poses significant security risks.