CVE-2020-20672

An arbitrary file upload vulnerability in /admin/upload/uploadfile of KiteCMS V1.1 allows attackers to getshell via a crafted PHP file...

CVE-2020-20672: Unrestricted Upload of File with Dangerous Type

An arbitrary file upload vulnerability in /admin/upload/uploadfile of KiteCMS V1.1 allows attackers to getshell via a crafted PHP file...

PT-2021-10529

Name of the Vulnerable Software and Affected Versions: KiteCMS version 1.1 Description: An arbitrary file upload vulnerability in the "/admin/upload/uploadfile" API endpoint of KiteCMS allows attackers to upload a crafted PHP file, potentially leading to unauthorized access. Recommendations: For...