|
Description
|
|
Multiple vulnerabilities have been identified in phpMyDesktop|arcade, which could be exploited by remote attackers to execute arbitrary commands or scripting code.
The first issue is due to input validation errors in the file upload functionality that does not properly validate uploaded images, which could be exploited by attackers to cause malicious scripting code to be executed by the user's browser.
The second flaw is due to an input validation error in the "index.php" script that does not validate the "subsite" parameter, which could be exploited by malicious users to include local files (e.g. uploaded images) and execute arbitrary commands with the privileges of the web server.
|
