A vulnerability has been reported for Upload Lite that may allow remote attackers to upload arbitrary files. Specifically, the script only checks to see whether the file to be uploaded has a certain extension. As such, any file that includes the allowed extensions may be uploaded. Any uploaded files will be stored in the specified folder.
A vulnerability has been reported for Upload Lite that may allow remote attackers to upload arbitrary files. Specifically, the script only checks to see whether the file to be uploaded has a certain extension. As such, any file that includes the allowed extensions may be uploaded. Any uploaded files will be stored in the specified folder.