FileChucker Multiple Arbitrary File Upload Vulnerabilities

Bugtraq ID:	61448
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Jul 24 2013 12:00AM
Updated:	Jul 24 2013 12:00AM
Credit:	Iranian_Dark_Coders_Team
Vulnerable:	Encodable Industries FileChucker 4.56t-e07
Not Vulnerable:

FileChucker Multiple Arbitrary File Upload Vulnerabilities

FileChucker is prone to multiple vulnerabilities that let attackers upload arbitrary files. These issues occur because it fails to adequately sanitize user-supplied input.

An attacker may leverage these issues to upload arbitrary files to the affected computer; this can result in an arbitrary script code execution within the context of the affected site.

FileChucker 4.56t-e07 is vulnerable; other versions may also be affected.

FileChucker Multiple Arbitrary File Upload Vulnerabilities

An attacker can exploit these issues using a web browser.

FileChucker Multiple Arbitrary File Upload Vulnerabilities

Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

FileChucker Multiple Arbitrary File Upload Vulnerabilities

References:

• FileChucker Homepage (Encodable Industries)