Description
Delta Sql 1.8.2 contains an arbitrary file upload vulnerability that allows unauthenticated attackers to upload malicious files by sending POST requests to docs_upload.php with crafted multipart form data. Attackers can upload PHP files with arbitrary content to the upload directory and execute them on the server for remote code execution.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Deltasql | Delta Sql | 1.8.2 | — |
References
- ExploitDB-45685 exploit
- Official Product Homepage product
- Product Reference product
- Product Reference product
- VulnCheck Advisory: Delta Sql 1.8.2 Arbitrary File Upload via docs_upload.php third-party-advisory