getaphpsite.com Auto Dealers Arbitrary File Upload Vulnerability
BID:32432
Info
getaphpsite.com Auto Dealers Arbitrary File Upload Vulnerability
| Bugtraq ID: | 32432 |
| Class: | Access Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Nov 22 2008 12:00AM |
| Updated: | Nov 24 2008 09:03PM |
| Credit: | ZoRLu |
| Vulnerable: |
getaphpsite.com Auto Dealers 0 |
| Not Vulnerable: | |
Discussion
getaphpsite.com Auto Dealers Arbitrary File Upload Vulnerability
Auto Dealers (by getaphpsite.com) is prone to a vulnerability that lets attackers upload arbitrary files because the application fails to properly verify the file extensions of uploaded files.
An attacker can exploit this issue to upload arbitrary files and execute malicious code in the context of the webserver process. This may allow the attacker to compromise the application and the underlying system; other attacks are also possible.
Auto Dealers (by getaphpsite.com) is prone to a vulnerability that lets attackers upload arbitrary files because the application fails to properly verify the file extensions of uploaded files.
An attacker can exploit this issue to upload arbitrary files and execute malicious code in the context of the webserver process. This may allow the attacker to compromise the application and the underlying system; other attacks are also possible.
Exploit / POC
getaphpsite.com Auto Dealers Arbitrary File Upload Vulnerability
Attackers can exploit this issue via a browser.
Attackers can exploit this issue via a browser.
Solution / Fix
getaphpsite.com Auto Dealers Arbitrary File Upload Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
References
getaphpsite.com Auto Dealers Arbitrary File Upload Vulnerability
References:
References:
- Auto Dealers Homepage (getaphpsite.com)