• info
• discussion
• exploit
• solution
• references

DZCP Clanportal Index.PHP Arbitrary File Upload Vulnerability

deV!L`z Clanportal is prone to an arbitrary file-upload vulnerability because it fails to sufficiently sanitize user-supplied input.

Exploiting this issue could allow an attacker to upload and execute arbitrary script code in the context of the affected webserver process. This may facilitate the compromise of the application; other attacks are possible.

Version 1.3.6 is vulnerable; prior versions may be affected.