vendor:
barbo91 uploads
by:
indoushka
7.5
CVSS
HIGH
Upload Shell
434
CWE
Product Name: barbo91 uploads
Affected Version From: N/A
Affected Version To: N/A
Patch Exists: NO
Related CWE: N/A
CPE: N/A
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: Windows SP2 Français V.(Pnx2 2.0) + Lunix Français v.(9.4 Ubuntu)
2009
barbo91 uploads Upload Shell Vulnerability
An attacker can upload a malicious file to the vulnerable server by exploiting the barbo91 uploads Upload Shell Vulnerability. The malicious file can be accessed by the attacker by visiting the URL http://server/barbo91_uploads/ev!l.php
Mitigation:
The application should validate the file type before uploading it to the server. The application should also restrict the file types that can be uploaded to the server.
