Can Upload Non-CSV Files in Data File Entry #504

stowellm · 2012-09-28T13:50:27Z

And after that, I am brought to this link:

jdalphond · 2012-09-28T14:55:01Z

@stowellm can you send me the file you tried to upload?

stowellm · 2012-09-28T17:43:35Z

Tried this again: I got brought to the correct session webpage now. I uploaded a .png instead of .csv, and this is what I got:

I will e-mail you the .png file that caused this.

ghost · 2012-10-15T19:02:12Z

looks like mime types are only checked if $filename == NULL

ghost mentioned this issue Oct 15, 2012

fully exploitable sqli in /ws/highdata.php (and perhaps others) #510

Open

Provide feedback