PHPWebSite 0.x Image File Processing Remote Arbitrary PHP File Upload Vulnerability

ID SSV:78828
Type seebug
Reporter Root
Modified 2014-07-01T00:00:00


No description provided by source.


phpWebSite is reported prone to a remote arbitrary PHP file upload vulnerability. The issue presents itself due to a lack of sanitization performed on image files that are uploaded when submitting an announcement.

A remote attacker may exploit this condition to execute arbitrary PHP code in the context of the hosting web server process.

This vulnerability is reported to affect phpWebSite versions up to an including version 0.10.0.

1. Fill all inputs
2. in Image: select nst.gif.php

press Save.

Go here -la