Acronis: Unrestricted file upload vulnerability in IMCE

Summary Steps To Reproduce POC 1. Go to "https://forum.acronis.com/" and creat user 1. Click on edit profile and go to Signature click on inser image usig imce file manger 1. Now upload php file and bypass to add .gif in the endpoint Recommendations...

CVE-2006-7109

Unrestricted file upload vulnerability in IMCE before 1.6, a Drupal module, allows remote authenticated users to upload arbitrary PHP code via a filename with a double extension such as .php.gif...

CVE-2006-7109

Summary: CVE-2006-7109 is an unrestricted file upload vulnerability in the IMCE Drupal module (before 1.6). The issue allows remote authenticated users to upload arbitrary PHP code by using a filename with a double extension such as .php.gif. Details from connected docs: The HackerOne report prov...