TI-2007-03897 CVE-2007-4026 · GHSA-5qf6-qg6x-q4h6epesi framework before 0.8.6 does not properly verify file extensions, which allows…Priority LOW 32epesi framework before 0.8.6 does not properly verify file extensions, which allows remote attackers to upload and execute arbitrary PHP code via unspecified vectors involving the gallery images upload feature.CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.01165 · Published 2007-07-26 · No fix listed