getaphpsite.com Real Estate Arbitrary File Upload Vulnerability
BID:32433
Info
getaphpsite.com Real Estate Arbitrary File Upload Vulnerability
| Bugtraq ID: | 32433 |
| Class: | Access Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Nov 22 2008 12:00AM |
| Updated: | Nov 24 2008 09:03PM |
| Credit: | ZoRLu |
| Vulnerable: |
getaphpsite.com Real Estate 0 |
| Not Vulnerable: | |
Discussion
getaphpsite.com Real Estate Arbitrary File Upload Vulnerability
Real Estate (by getaphpsite.com) is prone to a vulnerability that lets attackers upload arbitrary files because it fails to properly verify the file extensions of uploaded files.
An attacker can exploit this issue to execute malicious code in the context of the webserver process. This may allow the attacker to compromise the application and the underlying system; other attacks are also possible.
Real Estate (by getaphpsite.com) is prone to a vulnerability that lets attackers upload arbitrary files because it fails to properly verify the file extensions of uploaded files.
An attacker can exploit this issue to execute malicious code in the context of the webserver process. This may allow the attacker to compromise the application and the underlying system; other attacks are also possible.
Exploit / POC
getaphpsite.com Real Estate Arbitrary File Upload Vulnerability
Attackers can exploit this issue via a browser.
Attackers can exploit this issue via a browser.
Solution / Fix
getaphpsite.com Real Estate Arbitrary File Upload Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
References
getaphpsite.com Real Estate Arbitrary File Upload Vulnerability
References:
References:
- Real Estate Homepage (getaphpsite.com)