exploit-db-mirror/platforms/php/webapps/31750.txt
Offensive Security c47758095a Updated 02_20_2014
2014-02-20 04:27:43 +00:00

8 lines
422 B
Text
Executable file

source: http://www.securityfocus.com/bid/29072/info
QTO File Manager is prone to a vulnerability that lets remote attackers upload and execute arbitrary script code because the application fails to sanitize user-supplied input.
An attacker can leverage this issue to execute arbitrary code on an affected computer with the privileges of the webserver process.
http://www.example.com/qtofm.php?[shell.php.jpg]