VULNERABILITY INTELLIGENCE
CVE-2006-3128
CVSS score4.6 MEDIUM
EPSS probability1.24%
CISA KEVNot currently listed
Published2006-06-21
Last modified2026-06-16
CVSS vectorAV:N/AC:H/Au:S/C:P/I:P/A:P
Description
choose_file.php in easy-CMS 0.1.2, when mod_mime is installed, does not restrict uploads of filenames with multiple extensions, which allows remote attackers to execute arbitrary PHP code by uploading a PHP file with a GIF file extension, then directly accessing that file in the Repositories directory.