CVE-2007-0871
Unrestricted file upload vulnerability in eXtremePow eXtreme File Hosting allows remote attackers...
Unrestricted file upload vulnerability in eXtremePow eXtreme File Hosting allows remote attackers to upload arbitrary PHP code via a filename with a double extension such as (1) .rar.php or (2) .zip.php.
Exploit likelihood
What each source reports
NVD Score used
Unrestricted file upload vulnerability in eXtremePow eXtreme File Hosting allows remote attackers to upload arbitrary PHP code via a filename with a double extension such as (1) .rar.php or (2) .zip.php.
- Record
CVE-2007-0871- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
Unrestricted file upload vulnerability in eXtremePow eXtreme File Hosting allows remote attackers to upload arbitrary PHP code via a filename with a double extension such as (1) .rar.php or (2) .zip.php.
- Record
CVE-2007-0871- Updated
- 2026-11-02
EUVDEUVD-2007-0867 No score
Unrestricted file upload vulnerability in eXtremePow eXtreme File Hosting allows remote attackers to upload arbitrary PHP code via a filename with a double extension such as (1) .rar.php or (2) .zip.php.
- Record
EUVD-2007-0867- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-9xqj-4hv5-3w2c No score
Unrestricted file upload vulnerability in eXtremePow eXtreme File Hosting allows remote attackers...
Unrestricted file upload vulnerability in eXtremePow eXtreme File Hosting allows remote attackers to upload arbitrary PHP code via a filename with a double extension such as (1) .rar.php or (2) .zip.php.
- Record
GHSA-9xqj-4hv5-3w2c- Updated
- 2026-11-02
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | eXtreme File Hosting - Arbitrary '.RAR' File Upload | 2007-02-09 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2007-0871 is a high vulnerability (CVSS 7.5) in Extremepow Extreme File Hosting, published February 12, 2007. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 3.00%, the 87th percentile. No source names a fixed version.