Loading HuntDB...

[insideok.ru] Remote Command Execution via file upload.

Critical
O
ok.ru
Submitted None

Team Summary

Official summary from ok.ru

Incorrect configuration of the insideok.ru web server allowed PHP execution in the directory with user-generated files, which could be used for RCE.

Reported by iframe

Report Details

Additional information and metadata

State

Closed

Substate

Resolved

Submitted

Weakness

Command Injection - Generic