Description
Unrestricted file upload vulnerability in eFileMan 7.1.0.87-88 allows remote attackers to upload arbitrary files, with "uploads/upload_file." destination filenames, via unspecified vectors to upload.cgi, accessed from upload.html.
References
- 39013 vdb-entry
- 20071023 [Vulz] eFileMan 7.x Multiple Vulnerabilities by Xcross87 mailing-list
- 26184 vdb-entry
- 3323 third-party-advisory