CVE-2009-4818

CVE-2009-4818 describes an unrestricted file upload vulnerability in PHPSimplicity Simplicity oF Upload version 1.3.2. This flaw allows remote attackers to execute arbitrary PHP code by uploading files with double extensions, such as .php.gif. With a CVSS score of 6.8, it carries a medium severity, indicating that an attacker can exploit it over the network with medium attack complexity to achieve partial confidentiality, integrity, and availability impacts. While not listed in CISA's KEV catalog, an exploit is publicly available on ExploitDB, though there is no evidence of widespread active exploitation or significant community discussion.