vendor:
PHP Uploader Downloader
by:
indoushka
7.5
CVSS
HIGH
Upload Shell
434
CWE
Product Name: PHP Uploader Downloader
Affected Version From: 2
Affected Version To: 2
Patch Exists: NO
Related CWE:
CPE: a:zachwhite:php_uploader_downloader
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: Windows, Linux
2009
PHP Uploader Downloader Upload Shell Vulnerability
A vulnerability in PHP Uploader Downloader Version 2.0 allows an attacker to upload a malicious shell to the server. The attacker can then use the shell to execute arbitrary code on the server.
Mitigation:
Ensure that the application is configured to only allow the upload of files with the appropriate MIME type and that the application is configured to only allow the upload of files with the appropriate file extension.
