Description
Rigter Portal System (RPS) 1.0, 2.0, and 3.0 allows remote attackers to bypass authentication and upload arbitrary files via direct requests to (1) adm/photos/images.php and (2) adm/down/files.php.
References
- 28637 vdb-entry
- 20060719 Multiple Vulnerabilities RPS mailing-list
- rps-images-files-file-upload(27873) vdb-entry
- 28638 vdb-entry
- 2322 third-party-advisory