Unrestricted file upload vulnerability in editimage.php in eZoneScripts Living Local 1.1 allows remote authenticated administrators to execute arbitrary PHP code by uploading a file with an executable extension, then accessing it via a direct request to the uploaded file.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Living_local | Ezonescripts | 1.1 (including) | 1.1 (including) |