Bits Video Script 2.04/2.05 – ‘/addvideo.php’ Arbitrary File Upload / Arbitrary PHP Code Execution

• Exploit Database
• 373 阅读

• 作者： indoushka
  日期： 2010-01-18
• 类别：

  • webapps
  平台：

  • php
• 来源：https://www.exploit-db.com/exploits/34119/
• 1 2 3 4 5 6 7 8 9 10

  source: https://www.securityfocus.com/bid/40712/info   Bits Video Script is prone to multiple arbitrary-file-upload vulnerabilities because it fails to properly sanitize user-supplied input.   An attacker can exploit these vulnerabilities to upload arbitrary code and run it in the context of the webserver process. This may facilitate unauthorized access or privilege escalation; other attacks are also possible.   Bits Video Script 2.04 and 2.05 Gold Beta are vulnerable; other versions may also be affected.   http://www.example.com/Video/addvideo.php