CVE-2009-4818
PHPSimplicity Simplicity oF Upload 1.3.2 - Unrestricted File Upload via Double Extension Bypass
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2009-4818. PoCs published by Master Mind.
AI-analyzed exploit summary This exploit demonstrates a remote file upload vulnerability in Simplicity oF Upload 1.3.2, allowing an attacker to upload a malicious PHP shell disguised as an image file (e.g., Shell.php.gif) to achieve remote code execution (RCE). The exploit leverages the lack of proper file extension validation in the upload mechanism.
Description
Unrestricted file upload vulnerability in upload.php in PHPSimplicity Simplicity oF Upload 1.3.2 allows remote attackers to execute arbitrary PHP code by uploading a file with a double extension, as demonstrated by .php.gif.
Exploits (1)
This exploit demonstrates a remote file upload vulnerability in Simplicity oF Upload 1.3.2, allowing an attacker to upload a malicious PHP shell disguised as an image file (e.g., Shell.php.gif) to achieve remote code execution (RCE). The exploit leverages the lack of proper file extension validation in the upload mechanism.