3 ms·
On a CubeCart pluggin that had the same flaw as the timthumb.php one, I whitelisted image file extensions. This should work, as long as there aren't and local f
by dave1010uk 15y ago
On a CubeCart pluggin that had the same flaw as the timthumb.php one, I whitelisted image file extensions. This should work, as long as there aren't and local file include vulnerabilities in the site.
This still allows the attacker to host images on your site though.
- teyc 15y ago> This still allows the attacker to host images on your site though. Well put. Probably best to remove allowed hosts altogether.