CVE-2006-3158

The CVE-2006-3158 entry concerns Eduha Meeting: index.php fails to properly restrict file extensions before file upload, allowing remote attackers to bypass checks and upload or execute arbitrary PHP code via the add action. The issue is a client-facing file upload validation flaw that can lead t...