Unfortunately user can upload files by default.
Olate 3.4.2 check the extension of uploaded file and by default you can't=20
upload anything. Admin have to indicate which extensions are allowed for=20
uploading.
Here is code:
if ($site_config['enable_useruploads'] =3D=3D 1)
{
// Upload file
if (isset($_FILES['uploadfile']))
{ =09
$ext =3D strrchr($_FILES['uploadfile']['name'], '.');
$allowed_ext =3D explode(',', $site_config['uploads_allowed_ext']);
=09
if (in_array($ext, $allowed_ext))
{
Good Luck.
On Friday 31 August 2007, imei Addmimistrator wrote:
> VISIT ORIGINAL ADVISORY FOR MORE DETAILS
> http://myimei.com/security/2007-09-01/olate-download-342-useruploadphp-up=
lo
>ad-executable-files.html VISIT ORIGINAL ADVISORY FOR MORE DETAILS/
> =E2=80=94=E2=80=94-Summary=E2=80=94=E2=80=94
> Software: Olate Download
> Sowtware's Web Site: http://www.olate.co.uk/
> Versions: 3.4.2
> Class: Remote
> Status: Unpatched
> Exploit: Available
> Solution: Not Available
> Discovered by: imei Addmimistrator
> Risk Level: High
>
> VISIT ORIGINAL ADVISORY FOR MORE DETAILS
>=20
> http://myimei.com/security/2007-09-01/olate-download-342-useruploadphp-up=
lo
>ad-executable-files.html VISIT ORIGINAL ADVISORY FOR MORE DETAILS/