TI-2005-02478 CVE-2005-2614 · GHSA-vg4r-rg5m-fvpf
Discuz! 4.0 rc4 does not properly restrict types of files that are uploaded to the…
Priority LOW 37
Discuz! 4.0 rc4 does not properly restrict types of files that are uploaded to the server, which allows remote attackers to execute arbitrary commands via a filename containing ".php.rar" or other multiple extensions tha…