Search Results
| Search type | Search syntax |
|---|---|
| Tags | [tag] |
| Exact | "words here" |
| Author |
user:1234 user:me (yours) |
| Score |
score:3 (3+) score:0 (none) |
| Answers |
answers:3 (3+) answers:0 (none) isaccepted:yes hasaccepted:no inquestion:1234 |
| Views | views:250 |
| Code | code:"if (foo != bar)" |
| Sections |
title:apples body:"apples oranges" |
| URL | url:"*.example.com" |
| Saves | in:saves |
| Status |
closed:yes duplicate:no migrated:no wiki:no |
| Types |
is:question is:answer |
| Exclude |
-[tag] -apples |
| For more details on advanced search visit our help page | |
Results tagged with file-upload
Search options answers only
not deleted
user 10863
File upload means sending a file from a local system to a remote system such as a server or another client with the intent that the remote system should store a copy of the file being transferred.
1
vote
Does changing an uploaded executable's file extension to .png render it safe?
This is safe.
One can always smuggle executable code inside of an image:
Just upload your PHP code with another extension.
Put it in metadata, such as EXIF.
Use specifically colored pixels such tha …
- 33.1k
2
votes
Difference between phpp, php, and phP?
Like a usual CTF challenge, the idea is that someone set something up but there is a vulnerability in it. Your goal is to get the flag, and since you can upload a file, you probably have to get your c …
- 33.1k
4
votes
Accepted
Does opening an arbitrary file in a language (such as Python) pose a security risk?
No.
If the filename is controlled by the user, then you might open yourself up to vulnerabilities (e.g. an attacker might try to read config files with the database password). But just opening a file …
- 33.1k
54
votes
IMG tag vulnerability
There used to be a "vulnerability" where the image could send a HTTP 401 Unauthenticated response, which would trigger a login screen for the user. If you set this as forum avatar, it would spawn a lo …
- 33.1k
2
votes
What are security risks of serving user uploaded files without Content-Disposition?
Depends what filetypes are allowed to be uploaded and how the files are being handled.
If the page is directly loaded, the file ends in .php and the webserver recognizes and executes PHP files, then …
- 33.1k