PHP-Fusion 6.00.306 and previous versions, running under Apache HTTP Server 1.3.27 and PHP 4.3.3, allows remote authenticated users to upload files of arbitrary types using a filename that contains two or more extensions that ends in an assumed-valid extension such as .gif, which bypasses the validation, as demonstrated by uploading then executing an avatar file that ends in ".php.gif" and contains PHP code in EXIF metadata.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
php fusion php fusion 6.00.110 |
||
php fusion php fusion 6.00.204 |
||
php fusion php fusion 6.00.107 |
||
php fusion php fusion 6.00.109 |
||
php fusion php fusion 6.00.206 |
||
php fusion php fusion 6.00.3 |
||
php fusion php fusion 6.00.303 |
||
php fusion php fusion 6.00.105 |
||
php fusion php fusion 6.00.106 |
||
php fusion php fusion 6.00.304 |
||
php fusion php fusion 6.00.306 |
Vulmon