Unrestricted file upload

Unrestricted file upload vulnerability in auth.php in phpEmployment 1.8 allows remote attackers to execute arbitrary code by uploading a file with an executable extension during a regnew action, then accessing it via a direct request to the file in photoes/...

CVE-2008-6920

CVE-2008-6920 describes an unrestricted file upload in auth.php of phpEmployment 1.8, enabling remote code execution by uploading a file with an executable extension during regnew and then accessing it via a direct request to the file under photoes/. The core issue is lack of proper validation an...