Record summary

CVE-2009-4818 has a selected CVSS score of 6.8; EIP currently links 1 catalogued exploit.

Description

Unrestricted file upload vulnerability in upload.php in PHPSimplicity Simplicity oF Upload 1.3.2 allows remote attackers to execute arbitrary PHP code by uploading a file with a double extension, as demonstrated by .php.gif.

Description source: CVE List

Exploitation context

Available material

Catalogued exploits
1

Proofs of concept

1

Catalogued exploits

ExploitDBSimplicity oF Upload 1.3.2 - Arbitrary File UploadExploitDB exploitby Master MindNot analyzed1 file
ExploitDB

PoC details

References

4