high8.8Public exploit code
CVE-2011-4334
edit.php in LabWiki 1.1 and earlier does not properly verify uploaded user files, which allows remote authenticated users to upload arbitrary PHP files via a P…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- labwiki 1.1 - Multiple Vulnerabilities2011-11-09 · webapps · php · Verified
Impact
edit.php in LabWiki 1.1 and earlier does not properly verify uploaded user files, which allows remote authenticated users to upload arbitrary PHP files via a PHP file with a .gif extension in the userfile parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Labwiki Project | Labwiki | through 1.1 |