TSA 2010-03/1

Published by AlexC, Mar 21, 2010

A file upload filter bypass was reported by Nick Freeman which allowed the possibility to upload and execute a PHP script. Due to the requirements of the environment for this exploit to work, we are treating this as a very low risk issue.

Affected versions:

< 2.5.1

Related bug report:

Security #237

Solution:

Upgrade to 2.5.1 or later