vendor:
Upload Vulnerability
by:
indoushka
7,5
CVSS
HIGH
Upload Vulnerability
434
CWE
Product Name: Upload Vulnerability
Affected Version From: N/A
Affected Version To: N/A
Patch Exists: NO
Related CWE: N/A
CPE: N/A
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: Windows, Linux
2008
Free Image & File Hosting Upload Vulnerability
A vulnerability exists in the Free Image & File Hosting Upload Vulnerability, which allows an attacker to upload malicious files to the server. This can be exploited by sending a specially crafted HTTP request with a malicious file attached. The attacker can then access the malicious file from the server.
Mitigation:
Ensure that the application is configured to only allow the upload of files with the expected file extensions and that the application is configured to only allow the upload of files with the expected file size.
