QTO File Manager 1.0 - 'qtofm.php' Arbitrary File Upload
| EKU-ID: 36696 | CVE: CVE-2008-2110;OSVDB-44853 | OSVDB-ID: |
| Author: CrAzY CrAcKeR | Published: 2008-05-06 | Verified:
 |
| Download: | ||
Rating☆☆☆☆☆ |
| EKU-ID: 36696 | CVE: CVE-2008-2110;OSVDB-44853 | OSVDB-ID: |
| Author: CrAzY CrAcKeR | Published: 2008-05-06 | Verified:
|
| Download: | ||
Rating☆☆☆☆☆ |
source: https://www.securityfocus.com/bid/29072/info QTO File Manager is prone to a vulnerability that lets remote attackers upload and execute arbitrary script code because the application fails to sanitize user-supplied input. An attacker can leverage this issue to execute arbitrary code on an affected computer with the privileges of the webserver process. http://www.example.com/qtofm.php?[shell.php.jpg]