vendor:
Article Script
by:
S.W.A.T.
7.5
CVSS
HIGH
Remote File Upload Vulnerability
434
CWE
Product Name: Article Script
Affected Version From: N/A
Affected Version To: N/A
Patch Exists: NO
Related CWE: N/A
CPE: N/A
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: N/A
2008
Availscript Article Script Remote File Upload Vulnerability
A vulnerability in Availscript Article Script allows an attacker to upload a malicious file to the server. An attacker can register on the site, login, and add a pen/author name. When adding the pen/author name, the attacker can select a malicious file such as c99.php. The malicious file will be uploaded to the server and renamed with a random text such as cc1bd-c99.php. The malicious file can then be accessed from the photos folder.
Mitigation:
Ensure that all user-uploaded files are properly validated and sanitized before being stored on the server.
