Unrestricted file upload

Unrestricted file upload vulnerability in maxImageUpload/index.php in PHP F1 Max's Image Uploader 1.0, when Apache is not configured to handle the mime-type for files with pjpeg or jpeg extensions, allows remote attackers to execute arbitrary code by uploading a file with a pjpeg or jpeg extensio...

CVE-2010-0390

Affected: PHP F1 Max's Image Uploader 1.0 (maxImageUpload/index.php). Unrestricted file upload exploitable when Apache does not handle mime-types for pjpeg/jpeg, allowing remote code execution by uploading a payload and accessing it directly under original/. Public exploit references exist (Explo...

CVE-2010-0390: Undefined Security Weakness

Unrestricted file upload vulnerability in maxImageUpload/index.php in PHP F1 Max's Image Uploader 1.0, when Apache is not configured to handle the mime-type for files with pjpeg or jpeg extensions, allows remote attackers to execute arbitrary code by uploading a file with a pjpeg or jpeg extensio...