CVE-2011-4334

Name of the Vulnerable Software and Affected Versions: LabWiki versions 1.1 and earlier

Description: The issue concerns the improper verification of uploaded user files in edit.php, allowing remote authenticated users to upload arbitrary PHP files. This can be achieved by uploading a PHP file with a .gif extension using the userfile parameter.

Recommendations: For LabWiki versions 1.1 and earlier, as a temporary workaround, consider restricting access to the edit.php file until a proper fix is applied, and avoid using the userfile parameter to upload files. At the moment, there is no information about a newer version that contains a fix for this vulnerability.