Описание
Unrestricted file upload vulnerability in Uber Uploader 4.2 allows remote attackers to upload and execute arbitrary PHP scripts by naming them with a .phtml extension, which bypasses the .php extension check but is still executable on some server configurations.
Ссылки
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:uber_uploader:uber_uploader:4.2:*:*:*:*:*:*:*
EPSS
Процентиль: 57%
0.00351
Низкий
6.8 Medium
CVSS2
Дефекты
NVD-CWE-Other
Связанные уязвимости
github
почти 4 года назад
Unrestricted file upload vulnerability in Uber Uploader 4.2 allows remote attackers to upload and execute arbitrary PHP scripts by naming them with a .phtml extension, which bypasses the .php extension check but is still executable on some server configurations.
EPSS
Процентиль: 57%
0.00351
Низкий
6.8 Medium
CVSS2
Дефекты
NVD-CWE-Other