| Package | Affected versions | Patched versions |
|---|---|---|
| avatar mod | = 1.3 |
avatar_upload.asp in Avatar MOD 1.3 for Snitz Forums 3.4, and possibly other versions, allows remote attackers to bypass file type checks and upload arbitrary files via a null byte in the file name, as discovered by the Codescan product.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free