Emlog Pro Unrestricted File Upload Vulnerability in Media Upload Action

A file unrestricted upload vulnerability has been identified in Emlog Pro versions through 2.5.18. The issue resides in the file '/admin/media.php?action=upload&sid=0', where inadequate validation of the 'file' parameter allows attackers to upload arbitrary files, including malicious scripts. This vulnerability can be exploited remotely, with a public proof-of-concept available.

Impact

Exploitation of this vulnerability allows attackers to upload and execute malicious scripts on the server, potentially leading to unauthorized access, data manipulation, malware distribution, or disruption of services.

Reproduction

The vulnerability can be reproduced by sending a POST request to '/admin/media.php?action=upload&sid=0' with a file payload that includes a malicious script disguised as an image. The uploaded file is then executed on the server, demonstrating the unrestricted upload and execution capability.