CVE-2010-0390 | BDVDB-2026-40159 Detail

Description#

Unrestricted file upload vulnerability in maxImageUpload/index.php in PHP F1 Max's Image Uploader 1.0, when Apache is not configured to handle the mime-type for files with pjpeg or jpeg extensions, allows remote attackers to execute arbitrary code by uploading a file with a pjpeg or jpeg extension, then accessing it via a direct request to the file in original/. NOTE: some of these details are obtained from third party information.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12010-01-26Record published in the CVE List.
2. Version 22024-08-07Most recent update recorded in the CVE List.