CVE-2007-0123

Published Jan 9, 2007 uber_uploader

Overview

CVE-2007-0123 is a known-severity vulnerability affecting uber_uploader uber_uploader. It was published on January 9, 2007.

Technical Description

Unrestricted file upload vulnerability in Uber Uploader 4.2 allows remote attackers to upload and execute arbitrary PHP scripts by naming them with a .phtml extension, which bypasses the .php extension check but is still executable on some server configurations.

Remediation

Check the references section for vendor advisories and patches from uber_uploader. Update uber_uploader to the latest patched version. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

Affected Products

Vendor	Product	Versions	Status

References

Ref securityreason.com/securityalert/2116 Ref www.securityfocus.com/archive/1/456045/100/0/threaded Ref exchange.xforce.ibmcloud.com/vulnerabilities/31303 Ref securityreason.com/securityalert/2116 Ref www.securityfocus.com/archive/1/456045/100/0/threaded Ref exchange.xforce.ibmcloud.com/vulnerabilities/31303

Frequently Asked Questions

What is CVE-2007-0123?

CVE-2007-0123 is a known-severity vulnerability affecting uber_uploader uber_uploader. It was published on January 9, 2007.

How severe is CVE-2007-0123?

CVSS score information is not yet available for this vulnerability. Check back as the CVE record is updated by NVD analysts.

How do I fix or remediate CVE-2007-0123?

How can CyberStrike help with CVE-2007-0123?

CyberStrike's AI-powered security agents can automatically detect CVE-2007-0123 across your infrastructure using autonomous pentesting, DAST scanning, and HackBrowser. The platform continuously monitors for known vulnerabilities and provides actionable remediation guidance prioritized by real-world exploitability.