Description
The Admin panel in PwsPHP 1.2.2 does not properly verify uploaded picture files, which allows remote attackers to upload and possibly execute arbitrary files.
References
- 16236 vdb-entry
- pwsphp-admin-panel-file-upload(20508) vdb-entry
- 20050507 PwsPHP v1.2.2 Final - Multiples vulnerabilities mailing-list
- 15315 third-party-advisory