Types of File Upload Issues
- No file type Validation
- The server does not check the file extension.
- Example: Allowed:.jpg
- Attacker uploads:shell.php
- Only Client-Side Validation.
- Validation is done only in the browser (JavaScript).
- 5: An attacker can easily bypass using Burp Suite.
