Arbitrary Code Execution via Unrestricted File Upload in C-BOARD Moyuku

CVE-2015-0877 · HIGH Severity

AV:N/AC:L/AU:N/C:P/I:P/A:P

Unrestricted file upload vulnerability in app/lib/mlf.pl in C-BOARD Moyuku before 1.03b3 allows remote attackers to execute arbitrary code by uploading a file with a \0 character in its name.

Learn more about our Web Application Penetration Testing UK.