CVE-2025-67084: Php Upload Missing Extension Allowlistcve-2025-67084-php-upload-missing-extension-allowlist
File upload handler reads $_FILES and persists it via move_uploaded_file() without validating the file extension against a strict allowlist. MIME-type checks are insufficient: PHP source files match text/plain, and mime_content_type() silently does nothing on installations without the fileinfo extension. If the uploads directory is web-accessible, an attacke
