Description (CNA)
An Arbitrary File Upload vulnerability exists in admin/media/upload.php in WebsiteBaker 2.8.1 and earlier due to a failure to restrict uploaded files with .htaccess, .php4, .php5, and .phtl extensions.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| WebsiteBaker / WebsiteBaker | affected through 2.8.1 |
CWE
No CWE identifiers supplied.
References
ADP enrichment
No English description supplied.