Unrestricted file upload

2009-04-2918:30:00

PRIOn knowledge base

www.prio-n.com

8.1 High

AI Score

Confidence

Low

0.055 Low

EPSS

Percentile

93.3%

JSON

Unrestricted file upload vulnerability in admin/editor/images.php in K&S Shopsoftware allows remote attackers to execute arbitrary PHP code by uploading a file with an executable extension, then accessing it via a direct request to the file in images/upload/.