Description
users.ini.php in BoastMachine 3.0 does not properly restrict the types of files that can be uploaded, which allows remote attackers to execute arbitrary code.
References
- 16334 vdb-entry
- 15312 third-party-advisory
- http://www.kernelpanik.org/docs/kernelpanik/bmachines.txt
- 13600 vdb-entry