CVE-2003-1552 Unrestricted file upload vulnerability in uploader.php in Uploader 1.1 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direc...
MediumCVSS 6.8
EPSS 2.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Unrestricted file upload vulnerability in uploader.php in Uploader 1.1 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in uploads/.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| graeme uploader | = 1.1 | No fix listed |
References
- 20030304 uploader.php vulnerability mailing-list
- 20030304 uploader.php script mailing-list
- uploader-uploads-file-upload(11467) vdb-entry