Unrestricted file upload vulnerability in auth.php in phpEmployment 1.8 allows remote attackers to execute arbitrary code by uploading a file with an executable extension during a regnew action, then accessing it via a direct request to the file in photoes/.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Phpemployment | W2b | 1.8 (including) | 1.8 (including) |