CVE-2007-6479

CVE-2007-6479 describes an unrestricted file upload vulnerability in Dokeos 1.8.4, specifically within the "My productions" component (main/auth/profile.php). Authenticated users can exploit this by uploading arbitrary PHP files with double extensions, which can then be executed from a predictable URI. The vulnerability has a CVSS score of 4.9, indicating medium severity, with an attack vector of network, medium attack complexity, and requiring authentication, leading to partial confidentiality and integrity impacts. Its FAUCET Risk Score is 78/100, suggesting a notable risk. While not listed in CISA's KEV catalog and showing no active exploitation or community discussion, exploit code is publicly available via ExploitDB (EDB-4753), indicating a known method for exploitation.