PT-2018-10542

Name of the Vulnerable Software and Affected Versions Jigowatt PHP Login & User Management versions prior to 4.1.1 Description The issue allows any remote authenticated user to upload .php files to the web server via a profile avatar field in the /classes/profile.class.php file. This results in...