• info
• discussion
• exploit
• solution
• references

Ansilove Multiple Input Validation Vulnerabilities

Ansilove is prone to multiple input-validation vulnerabilities. These issues could be exploited to obtain sensitive information or upload arbitrary scripts. Due to a missing '.htaccess' file in the upload directory, the uploaded scripts may be accessed directly and executed.

Ansilove versions prior to 1.03 are vulnerable to these issues.