BrewPi/brewpi-www

No restriction on file upload

Opened this issue · 0 comments

The program_arduino.php page allow to upload a hex file in order to reprogram the duino.

There is no restriction on the uploaded file, it's possible to upload PHP file (.php or .php3 extensions).