Deprecated: The each() function is deprecated. This message will be suppressed on further calls in /home/zhenxiangba/zhenxiangba.com/public_html/phproxy-improved-master/index.php on line 456
Re: Uber Uploader <= 5.3.6 Remote File Upload Vulnerability
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: Uber Uploader <= 5.3.6 Remote File Upload Vulnerability
- To: bugtraq@xxxxxxxxxxxxxxxxx
- Subject: Re: Uber Uploader <= 5.3.6 Remote File Upload Vulnerability
- From: recklessb@xxxxxxxxxxxxxxxxxxxxx
- Date: 18 Dec 2007 20:31:13 -0000
UU already provides a mechanism to detect file extensions client and server
side. It is "YOUR" responsibility when you install this script to add file
extensions that you may or may not want uploaded. Jeesh!
$disallow_extensions =
'/(sh|php|php3|php4|php5|py|shtml|phtml|cgi|pl|plx|htaccess|htpasswd)$/i';
$allow_extensions = '/(jpg|jpeg|gif|bmp)$/i';