vendor:
Battle Scrypt
by:
DigitALL
8,8
CVSS
HIGH
Remote File Upload
434
CWE
Product Name: Battle Scrypt
Affected Version From: N/A
Affected Version To: N/A
Patch Exists: NO
Related CWE: N/A
CPE: a:scrypted:battlescrypt
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: Windows XP SP3
2010
Battle Scrypt Shell Upload Vulnerability
A remote file upload vulnerability exists in Battle Scrypt, which allows an attacker to upload a malicious file to the server. The attacker can then access the malicious file by accessing the URL /images/uploads/[id].php. This vulnerability can be exploited by using the d0rk 'Powered by Battle Scrypt' or inurl:upload.php.
Mitigation:
The application should validate the file type before allowing it to be uploaded. The application should also restrict the file types that can be uploaded.
