Description
Russcom PHPImages allows remote attackers to upload files of arbitrary types by uploading a file with a .gif extension. NOTE: due to lack of specific information about attack vectors do not depend on the existence of another vulnerability, it is not clear whether this is a vulnerability.
References
- 20060522 Russcom PHPImages lack of validation mailing-list
- 953 third-party-advisory
- phpimages-image-file-upload(26649) vdb-entry
- 18089 vdb-entry