CVEs-PoC/2009/CVE-2009-4090.md

CVE-2009-4090

Description

Unrestricted file upload vulnerability in ajax/addComment.php in telepark.wiki 2.4.23 and earlier script allows remote attackers to execute arbitrary code by uploading a file with a name containing a NULL byte.

POC

Reference

• http://packetstormsecurity.org/0911-exploits/Telepark-fixes-nov09-2.txt
• http://packetstormsecurity.org/0911-exploits/Telepark-fixes-nov09-2.txt

Github

No PoCs found on GitHub currently.