vendor:
PHP upload - unijimpe
by:
wlhaan hacker
9.3
CVSS
HIGH
Remote File Upload Vulnerability
434
CWE
Product Name: PHP upload - unijimpe
Affected Version From: N/A
Affected Version To: N/A
Patch Exists: NO
Related CWE: N/A
CPE: N/A
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: N/A
2020
PHP upload – unijimpe) Remote File Upload Vulnerability )
A vulnerability in PHP upload - unijimpe allows an attacker to upload a malicious file to the server. The attacker can then access the file via a URL and execute arbitrary code on the server. The vulnerability is caused by a lack of input validation in the upload.php script, which allows an attacker to upload a malicious file with a .pbmp or .pjpeg extension.
Mitigation:
Input validation should be implemented to prevent malicious files from being uploaded to the server.
