Description
Unrestricted file upload vulnerability in uploader.php in Uploader 1.1 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in uploads/.
References
- 20030304 uploader.php script mailing-list
- uploader-uploads-file-upload(11467) vdb-entry
- 20030304 uploader.php vulnerability mailing-list