Title: VidiScript Remote File Upload Vulnerability
Severity: MODERATE
Description:
VidiScript is PHP-based software for sharing videos.
The application is prone to a vulnerability that allows an attacker to upload arbitrary script code and execute it in the context of the webserver process.
The attacker can upload arbitrary files as their avatar in the application's profile section.
If successful, the attacker may gain unauthorized access or escalate privileges; other attacks are also possible.
Affected Products:
- VidiScript VidiScript
References:
- VidiScript: VidiScript Homepage