- This script is possibly vulnerable to unrestricted file upload. Various web applications allow users to upload files (such as pictures, images, sounds, ...). Uploaded files may pose a significant risk if not handled correctly. A remote attacker could send a multipart/form-data POST request with a specially-crafted filename or mime type and execute arbitrary code. Acunetix was able to upload a file containing executable code and get this code executed. Check Attack details for more information about this attack.
- Restrict file types accepted for upload: check the file extension and only allow certain files to be uploaded. Use a whitelist approach instead of a blacklist. Check for double extensions such as .php.png. Check for files without a filename like .htaccess (on ASP.NET, check for configuration files like web.config). Change the permissions on the upload folder so the files within it are not executable. If possible, rename the files that are uploaded.
- WordPress Plugin The Piecemaker 'php.php' Arbitrary File Upload (1.1)
- MySQL server older than 4.0.24 or 4.1.10a
- WordPress Plugin WP Business Intelligence Lite Arbitrary File Upload (1.0.6)
- WordPress Plugin Popular Posts TimThumb Arbitrary File Upload (2.1.4)
- MySQL Community Server to 5.1.23 / 6.0.4 multiple vulnerabilities