CVE-2007-3932: uploadimg.php in the Expose RC35 and earlier (com_expose) component for Joomla!

Security readout for executives and security teams

This old Joomla Expose gallery component flaw can let a remote attacker upload a PHP file even after the application detects it is not a JPEG. If that file lands in the web-accessible img/ folder and executes, the attacker may gain control of the site. Exposure is most likely on legacy Joomla deployments that still have Expose/com_expose RC35 or earlier installed, with uploadimg.php reachable and PHP execution allowed in the img/ directory. Treat this as high priority if any public Joomla site still runs the affected Expose component. The issue is old, but the impact is full site compromise and public exploit information exists. Mitigation focus: Inventory Joomla sites for Expose/com_expose and identify versions.; Check vendor or Joomla extension guidance for a fixed or supported replacement.; Disable or remove affected Expose versions if no supported fix is available..

Prepared

Jun 29, 2026, 04:34 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.