Description
Unrestricted file upload vulnerability in the Administration Panel for NewsPHP allows remote authenticated administrators to upload and execute arbitrary code instead of video files.
References
- newsphp-file-upload(15838) vdb-entry
- 1009740 vdb-entry
- 20040415 Re: XSS, Admin Access via Cookie and File Upload vulnerability in NewsPHP. mailing-list