Vulnerability in Mytutorials Tutorials
CVE-2003-0491
The Tutorials 2.0 module in XOOPS and E-XOOPS allows remote attackers to execute arbitrary code by uploading a PHP file without a MIME image type, then directly accessing the uploaded file.
EPSS: 0.022 (81.0th percentile) — read the EPSS interpretation.
Affected products
- Mytutorials Tutorials — versions 2.0
- N/a — versions n/a
References
- cve@mitre.org (mailing-list, x_refsource_BUGTRAQ, x_refsource_VULN-DEV)