Web shells and the dangers of unrestricted file upload

In previous blog posts, we have already illustrated two web application vulnerabilities: brute force login cracking and SQL injection. In this post we illustrate a 3rd vulnerability, unrestricted file upload, and show how it can be exploited using a web shell.

application application vulnerabilities blog blog posts brute cracking exploited file file upload injection login posts shell shells sql sql injection upload vulnerabilities vulnerability web web application web application vulnerabilities web shell