This is a writeup describing a file upload vulnerability in JomSocial 1.8.8 and earlier, allowing arbitrary file uploads if video uploads are enabled. The vulnerability was patched in version 1.8.9.
Classification
Writeup 90%
Attack Type
Rce
Complexity
Trivial
Reliability
Reliable
Target:JomSocial <= 1.8.8
Auth required
Prerequisites:Video upload feature enabled · User authentication