CVE-2007-4640

CVE-2007-4640 describes an unrestricted file upload vulnerability in Pakupaku CMS version 0.4 and earlier, specifically within the index.php component. This flaw allows remote, unauthenticated attackers to upload and execute arbitrary PHP files in the 'uploads/' directory, leading to potential compromise of the affected system. With a CVSS score of 6.4 (AV:N/AC:L/Au:N/C:P/I:P/A:N), it is considered a medium-severity vulnerability, indicating low attack complexity and potential for partial confidentiality and integrity impact. While there is no evidence of active exploitation or Metasploit modules, an exploit is publicly available on ExploitDB, though community discussion and media coverage are minimal.