phUploader File Upload Vulnerability

		Novahq.net Forum > phphq.Net > phphq.Net Forums
phUploader File Upload Vulnerability

05-25-2008, 05:56 PM

gopat

Registered User

Join Date: May 2008

Posts: 5

phUploader File Upload Vulnerability

I noticed this phUploader security issue at: SecurityFocus.

Below is a summary from: SecurityFocusArchives :

Quote:

phUploader is prone to an arbitrary file-upload vulnerability because the application fails to sufficiently sanitize user-supplied input.

Could you provide a code snippet to sanitize the user input, or better yet add it to a new version?

Great script, keep up the good work!

Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)

Posting Rules
You may not post new threads You may not post replies You may not post attachments You may not edit your posts BB code is On Smilies are On [IMG] code is On HTML code is Off Forum Rules

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
incorporate php file upload with MySQL form?	pauldridge	Tech Support	1	06-16-2010 08:46 AM
Send Email with Attachment from the File Upload	ronieperez	phphq.Net Forums	2	10-24-2008 07:14 PM
phUploader can erase file?	chrbar	phphq.Net Forums	3	09-06-2008 05:05 PM
Form verify phUploader so they MUST upload?	Lex	phphq.Net Forums	1	08-27-2007 06:13 PM
Microsoft Confirms WMF Vulnerability	zaitsev	Hardware and Software	0	01-02-2006 10:04 AM

All times are GMT -5. The time now is 07:30 PM.