Description
Website Baker Project does not properly verify the file extensions of uploaded files, which allows remote attackers to upload and execute arbitrary PHP code.
References
- website-baker-adminmedia-file-upload(21634) vdb-entry
- 18345 vdb-entry
- 20050728 Website Baker Project Multiple Vulnerabilities mailing-list
- 16263 third-party-advisory
- 14406 vdb-entry