The remote host is using Discuz!, a popular web application forum in China. According to its version, the installation of Discuz! on the remote host fails to properly check for multiple extensions in uploaded files. An attacker may be able to exploit this issue to execute arbitrary commands on the remote host subject to the privileges of the web server user id, typically nobody.

Upgrade to the latest version of this software.

• http://archives.neohapsis.com/archives/fulldisclosure/2005-08/0440.html

---

Updated on 2015-03-25