Geeklog Connector.PHP Arbitrary File Upload Vulnerability

Geeklog CMS is prone to an arbitrary file-upload vulnerability.

An attacker can exploit this vulnerability to upload malicious script code, which will be executed in the context of the webserver process.

An attacker may compromise the application by uploading and executing malicious PHP scripts with arbitrary filename extensions, because the application fails to sanitize multiple file extensions.


 

Privacy Statement
Copyright 2010, SecurityFocus