Postoji mogućnost da se ubaci* PHP kod u sliku kao komentar i ako negde na sajtu postoji
include vuln, lako može da se izvrši taj kod...
*
http://in.answers.yahoo.com/question...3030002AA1LzwG
Citat:
|
JPEGs can have meta-data in them. Author info, year, copyright, description and comments. Just like MP3s have ID3 tags - same concept. Image meta-data can be edited in most decent imaging programs, eg. IrfanView.
|