vendor:
N/A
by:
DigitALL
9,3
CVSS
HIGH
WebAdmin Shell Upload
264
CWE
Product Name: N/A
Affected Version From: N/A
Affected Version To: N/A
Patch Exists: No
Related CWE: N/A
CPE: N/A
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: N/A
2010
WebAdmin Shell Upload Vulnerability
This vulnerability allows an attacker to upload a malicious shell to a vulnerable web server. The attacker can then use the shell to gain access to the server and execute arbitrary code. The vulnerability is caused by a lack of proper input validation in the webadmin.php script, which allows an attacker to upload a malicious file to the server.
Mitigation:
The best way to mitigate this vulnerability is to ensure that proper input validation is implemented in the webadmin.php script. This can be done by ensuring that only valid file types are allowed to be uploaded, and that the uploaded files are scanned for malicious content.
