- This script is possibly vulnerable to unrestricted file upload. Various web applications allow users to upload files (such as pictures, images, sounds, ...). Uploaded files may pose a significant risk if not handled correctly. A remote attacker could send a multipart/form-data POST request with a specially-crafted filename or mime type and execute arbitrary code. Acunetix was able to upload a file containing executable code and get this code executed. Check Attack details for more information about this attack.
- Restrict file types accepted for upload: check the file extension and only allow certain files to be uploaded. Use a whitelist approach instead of a blacklist. Check for double extensions such as .php.png. Check for files without a filename like .htaccess (on ASP.NET, check for configuration files like web.config). Change the permissions on the upload folder so the files within it are not executable. If possible, rename the files that are uploaded.
- WordPress Plugin Royal Gallery 'upload.php' Arbitrary File Upload (2.1)
- WordPress Plugin Katalyst TimThumb 'timthumb.php' Arbitrary File Upload (1.0)
- WordPress Plugin WordPress Backup and Migrate-BackupGuard Arbitrary File Upload (1.0.2)
- HTML Form found in redirect page
- WordPress Plugin The Piecemaker 'php.php' Arbitrary File Upload (1.1)