---
id: 4947
title: "File Upload Attacks (Part 1)"
source_domain: yeswehack.com
source_url: "https://www.yeswehack.com/learn-bug-bounty/file-upload-attacks-part-1"
published_at: "2021-05-12T15:22:00Z"
tags: ["bug-bounty", "rce", "denial-of-service", "web-security", "path-traversal", "file-upload", "imagetragick"]
phying_url: "https://phying.com/item/4947"
lang: en
---

# File Upload Attacks (Part 1)

## Summary

Part one of the file upload attack series: how upload features lead to RCE, unrestricted uploads, file overwrite, path traversal, large-file DoS, server-side injection and ImageTragick.

## Intelligence Metadata

- **Sources:** yeswehack.com
- **Published:** 2021-05-12T15:22:00Z
- **Original:** https://www.yeswehack.com/learn-bug-bounty/file-upload-attacks-part-1
- **Phying News:** https://phying.com/item/4947