CVE-2008-3117 Information

Description

Unrestricted file upload vulnerability in update_profile.php in PHPmotion 2.0 and earlier allows remote authenticated users to execute arbitrary code by uploading a .php file with a content type of (1) image/gif (2) image/jpeg or (3) image/pjpeg then accessing it via a direct request to the file under pictures/.

Reference

http://www.securityfocus.com/bid/29949 https://exchange.xforce.ibmcloud.com/vulnerabilities/43375 https://www.exploit-db.com/exploits/5938