CVE-2008-3178

CVE-2008-3178 describes an unrestricted file upload in WebXell Editor 0.1.3 via upload_pictures.php. A remote attacker can upload a PHP file disguised as an image (jpeg content type) and access it directly under upload/ to achieve arbitrary code execution. The vulnerability is caused by lack of p...