Misconfigured File Upload to RCE

Even though file upload functionality responds with a file upload type error, it could still be possible that the file is being uploaded to the web server directory and then being checked. If the file is not deleted on the server after failing the file checks it could lead to RCE.

Last updated