Arbitrary File Upload File Upload Vulnerability in php-traditional-server v1.2.2

#954 · 2018-11-15

Arbitrary file upload

CVE ID(s): CVE-2018-9209

Summary: Arbitrary file upload in php-traditional-server v1.2.2

Notified: 2018-11-15

Description:

PHP-based server-side example for handling traditional endpoint requests from Fine Uploader

Exploit:

https://github.com/lcashdol/Exploits/tree/master/CVE-2018-9209

Notes:

Author deleted his software repository instead.

Download: https://web.archive.org/web/20180611151421/https://github.com/FineUploader/php-traditional-server

URL: http://www.vapidlabs.com/advisory.php?v=208