CVE-2007-4262
Unrestricted file upload vulnerability in EZPhotoSales 1.9.3 and earlier allows remote...
Unrestricted file upload vulnerability in EZPhotoSales 1.9.3 and earlier allows remote authenticated administrators to upload and execute arbitrary PHP code under OnlineViewing/galleries/.
Exploit likelihood
What each source reports
NVD Score used
8.5
Unrestricted file upload vulnerability in EZPhotoSales 1.9.3 and earlier allows remote authenticated administrators to upload and execute arbitrary PHP code under OnlineViewing/galleries/.
- Record
CVE-2007-4262- CVSS 2.0
- 8.5 High
AV:N/AC:M/Au:S/C:C/I:C/A:C - Updated
- 2026-11-02
CVE List No score
Unrestricted file upload vulnerability in EZPhotoSales 1.9.3 and earlier allows remote authenticated administrators to upload and execute arbitrary PHP code under OnlineViewing/galleries/.
- Record
CVE-2007-4262- Updated
- 2026-11-02
EUVDEUVD-2007-4245 No score
Unrestricted file upload vulnerability in EZPhotoSales 1.9.3 and earlier allows remote authenticated administrators to upload and execute arbitrary PHP code under OnlineViewing/galleries/.
- Record
EUVD-2007-4245- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-pr75-whp9-w4gq No score
Unrestricted file upload vulnerability in EZPhotoSales 1.9.3 and earlier allows remote...
Unrestricted file upload vulnerability in EZPhotoSales 1.9.3 and earlier allows remote authenticated administrators to upload and execute arbitrary PHP code under OnlineViewing/galleries/.
- Record
GHSA-pr75-whp9-w4gq- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| aliases, references, title | GitHub Advisories | |
| first indexed | CVE List, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2007-4262 is a high vulnerability (CVSS 8.5) in Ez Photo Sales Photo Sales, published August 8, 2007. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.78%, the 78th percentile. No source names a fixed version.
References
informit.com/guides/content.asp?g=security&seqNum=267
securityfocus.com/bid/25323
secunia.com/advisories/26341
informit.com/guides/content.asp?g=security&seqNum=268
securityreason.com/securityalert/2985
securityfocus.com/archive/1/475678/100/0/threaded
airscanner.com/security/07080601_ezphotosales.htm
nvd.nist.gov/vuln/detail/CVE-2007-4262
github.com/advisories/GHSA-pr75-whp9-w4gq