CVE-2019-12548

Bludit before 3.9.0 allows remote code execution for an authenticated user by uploading a php file while changing the logo through /admin/ajax/upload-logo...

PT-2019-12848

Name of the Vulnerable Software and Affected Versions Bludit versions prior to 3.9.0 Description The issue allows remote code execution for an authenticated user. This can be achieved by uploading a php file while changing the logo through the /admin/ajax/upload-logo API endpoint. Recommendations...