Lucene search
PRIOn knowledge basePRION:CVE-2018-11392HistoryMay 29, 2018 - 8:29 p.m.
Design/Logic Flaw
2018-05-2920:29:00
PRIOn knowledge base
www.prio-n.com
3
An arbitrary file upload vulnerability in /classes/profile.class.php in Jigowatt “PHP Login & User Management” before 4.1.1, as distributed in the Envato Market, allows any remote authenticated user to upload .php files to the web server via a profile avatar field. This results in arbitrary code execution by requesting the .php file.
| CPE | Name | Operator | Version |
|---|---|---|---|
| php_login_\\&_user_management | lt | 4.1.1 |
Related
cvelist
cvelist
CVE-2018-11392
2018-05-29 20:00:00
packetstorm
packetstorm
PHP Login And User Management 4.1.0 Shell Upload
2018-05-24 00:00:00
nvd
nvd
CVE-2018-11392
2018-05-29 20:29:02
zdt
zdt
PHP Login And User Management 4.1.0 Shell Upload Vulnerability
2018-05-25 00:00:00
cve
cve
CVE-2018-11392
2018-05-29 20:29:02