PT-2019-12528

Name of the Vulnerable Software and Affected Versions dotCMS version 5.1.1 Description The issue concerns an HTML Injection and XSS vulnerability. It is related to the "/servlets/ajax file upload" endpoint, specifically when the fieldName parameter is set to binary3. Recommendations For dotCMS...

PT-2017-12033

Name of the Vulnerable Software and Affected Versions dotCMS version 4.1.1 Description The issue allows remote authenticated administrators to upload arbitrary files, including .jsp files, to any location on the server. This is achieved through directory traversal sequences in the fieldName...