CVE-2007-3292
Unrestricted file upload vulnerability in LiveCMS 3.4 and earlier allows remote attackers to...
CVE-2007-3292 is a high vulnerability (CVSS 7.5) in Livecms, published June 20, 2007. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 2.45%, the 84th percentile. No source names a fixed version.
Unrestricted file upload vulnerability in LiveCMS 3.4 and earlier allows remote attackers to upload and execute arbitrary PHP code by specifying a PHP file type in a parameter intended for "a small image" associated with an article.
Exploit likelihood
What each source reports
NVD Score used
Unrestricted file upload vulnerability in LiveCMS 3.4 and earlier allows remote attackers to upload and execute arbitrary PHP code by specifying a PHP file type in a parameter intended for "a small image" associated with an article.
- Record
CVE-2007-3292- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
Unrestricted file upload vulnerability in LiveCMS 3.4 and earlier allows remote attackers to upload and execute arbitrary PHP code by specifying a PHP file type in a parameter intended for "a small image" associated with an article.
- Record
CVE-2007-3292- Updated
- 2026-11-02
EUVDEUVD-2007-3282 No score
Unrestricted file upload vulnerability in LiveCMS 3.4 and earlier allows remote attackers to upload and execute arbitrary PHP code by specifying a PHP file type in a parameter intended for "a small image" associated with an article.
- Record
EUVD-2007-3282- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-j3fc-rcm4-h5g9 No score
Unrestricted file upload vulnerability in LiveCMS 3.4 and earlier allows remote attackers to...
Unrestricted file upload vulnerability in LiveCMS 3.4 and earlier allows remote attackers to upload and execute arbitrary PHP code by specifying a PHP file type in a parameter intended for "a small image" associated with an article.
- Record
GHSA-j3fc-rcm4-h5g9- Updated
- 2026-11-02
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | LiveCMS 3.4 - 'categoria.php?cid' SQL Injection | 2007-06-20 |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | aliases, exploits, facts, references, title | Exploit-DB, GitHub Advisories |
| 2026-11-02 | created | CVE List, NVD |