Validation files were reviewed by all three file reviewers, which generated three data collection forms for each validation file (one for each reviewer). A fourth data collection form for each ...

Missing file extensions on blacklists (typically “.phtml”, as well as others such as “.php5”, “.pht”, “.asa” and more) are a common unrestricted file upload threat.