QTO File Manager 1.0 - 'qtofm.php' Arbitrary File Upload

EDB-ID:

31750




Platform:

PHP

Date:

2008-05-06


source: https://www.securityfocus.com/bid/29072/info

QTO File Manager is prone to a vulnerability that lets remote attackers upload and execute arbitrary script code because the application fails to sanitize user-supplied input.

An attacker can leverage this issue to execute arbitrary code on an affected computer with the privileges of the webserver process. 

http://www.example.com/qtofm.php?[shell.php.jpg]