Description
Kalptaru Infotech Ltd. Star Articles 6.0版本中的user.modify.profile.php存在未限制文件上传漏洞。远程认证用户可以通过先上传一个带有可执行性扩展名的文件作为剖面照片，然后再借助一个对authorphoto/中的文件的直接请求来访问它，从而实现任意代码执行。
Kalptaru_Infotech Star Articles 'user.modify.profile.php' 任意文件上传漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://nvd.nist.gov/vuln/detail/CVE-2008-7076
https://www.cve.org/CVERecord?id=CVE-2008-7076
https://vulnerability.circl.lu/search?vendor=kalptaru_infotech&product=stararticles
https://exchange.xforce.ibmcloud.com/vulnerabilities/46982
https://www.exploit-db.com/exploits/7251
https://cve.imfht.com/detail/CVE-2008-7076?lang=en