Unrestricted file upload vulnerability in usercp.php in MetaForum 0.513 Beta restricts file types based on the MIME type in the Content-type HTTP header, which allows remote attackers to upload and execute arbitrary scripts via an image MIME type with a filename containing an executable extension such as .php.

Threat-Mapped Scoring

Score: 0.0

Priority: Unclassified

EPSS

Score: 0.12756
Percentile: 0.93682

CVSS Scoring

Affected Products

• cpe:2.3:a:metaforum:metaforum:0.513_beta:*:*:*:*:*:*:*

← Back to Home