|
Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com |
FUD Forum < 2.7.1 PHP code injection vurnelability
riklaunim
gmail.com
Date: Sun Aug 28 2005 - 10:00:56 CDT
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
Avatar upload in FUD Forum < 2.7.1 may be tricked to upload a PHP file. To do so merge a graphic avatar file with a PHP file.
cat foo.png foo.php > upload_me.php
under linux/unix. On win try notepat :)
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]