6.8
CVSSv2

CVE-2009-4818

Published: 27/04/2010 Updated: 17/08/2017
CVSS v2 Base Score: 6.8 | Impact Score: 6.4 | Exploitability Score: 8.6
VMScore: 685
Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P

Vulnerability Summary

Unrestricted file upload vulnerability in upload.php in PHPSimplicity Simplicity oF Upload 1.3.2 allows remote malicious users to execute arbitrary PHP code by uploading a file with a double extension, as demonstrated by .php.gif.

Vulnerable Product Search on Vulmon Subscribe to Product

phpsimplicity simplicity of upload 1.3.2

Exploits

# Exploit Title: Simplicity oF Upload (132) Remote File Upload Vulnerability # Date: 20-12-2009 # Author: Master Mind # Software Link: wwwphpsimplicitycom/scriptsphp?id=3 # Version: 132 # CVE : [N/A] # Tested on: Windows 2003 Server ========================================================================== ~ Script Name : Simplicity ...