WebApp Sec mailing list archives
File Upload with changed extension
From: Jyotiranjan Acharya <jyotiranjan121 () gmail com>
Date: Tue, 2 Dec 2014 12:44:23 -0600
If you are able to upload a file with a changed extension, then will that be a problem? For example, you can not ,in any way, upload a .exe or .php/.jsp/.asp file directly into a web App, but you can by changing their extension to .JPG. What is the risk in such a case? This list is sponsored by Cenzic -------------------------------------- Let Us Hack You. Before Hackers Do! It's Finally Here - The Cenzic Website HealthCheck. FREE. Request Yours Now! http://www.cenzic.com/2009HClaunch_Securityfocus --------------------------------------
Current thread:
- File Upload with changed extension Jyotiranjan Acharya (Dec 02)
- Re: File Upload with changed extension Guillermo Caminer (Dec 02)
- Re: File Upload with changed extension Tobias Wassermann (Dec 03)
- Re: File Upload with changed extension Seth Art (Dec 03)
- Re: File Upload with changed extension Paul Burbage (Dec 03)
- Re: File Upload with changed extension Tobias Wassermann (Dec 03)
- Re: File Upload with changed extension Guillermo Caminer (Dec 02)
- Re: File Upload with changed extension Michal Zalewski (Dec 03)
- Re: File Upload with changed extension Robin Wood (Dec 04)