PT-2024-20384

Name of the Vulnerable Software and Affected Versions LeptonCMS version 7.0.0 Description An arbitrary file upload vulnerability allows authenticated attackers to execute arbitrary PHP code by uploading crafted PHP files to the backend/languages/index.php languages area. This enables the executio...

CVE-2024-24399: Unrestricted Upload of File with Dangerous Type

An arbitrary file upload vulnerability in LEPTON v7.0.0 allows authenticated attackers to execute arbitrary PHP code by uploading this code to the backend/languages/index.php languages area...

CVE-2022-25099

A vulnerability in the component /languages/index.php of WBCE CMS v1.5.2 allows attackers to execute arbitrary code via a crafted PHP file...

PT-2022-17076

Name of the Vulnerable Software and Affected Versions WBCE CMS version 1.5.2 Description A vulnerability in the component /languages/index.php allows attackers to execute arbitrary code via a crafted PHP file. Recommendations For WBCE CMS version 1.5.2, consider disabling access to the...