Description
Unrestricted file upload vulnerability in admin/upload.php in Benja CMS 0.1 allows remote attackers to upload and execute arbitrary PHP files via unspecified vectors, followed by a direct request to the file in billeder/.
References
- 20080622 Benja CMS 0.1 (Upload/XSS) Multiple Remote Vulnerabilities mailing-list
- 3958 third-party-advisory
- 30834 third-party-advisory
- 29884 vdb-entry
- benja-upload-file-upload(43282) vdb-entry