Description
A high privileged remote attacker can upload a .php file and then request it directly from /uploads/<filename>.php to achieve arbitrary code execution due to improper file type validation which could result in full system compromise.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Frauscher Sensortechnik FDS 102
Default version status: unaffected
2.8.0 to ≤ 2.13.3affected