Skip to content
OpenAdvisories

Vendor

WPO Foundation

1 known vulnerabilities.

Products

1 result · Clear filters · Feed

  • Critical 9.3
    CVE-2012-10049 Public exploit

    WebPageTest Arbitrary PHP File Upload RCE

    WebPageTest version 2.6 and earlier contains an arbitrary file upload vulnerability in the resultimage.php script. The application fails to validate or sanitize user-supplied input before saving uploaded files to a publicly accessible directory. This flaw all…