PT-2022-16774

Name of the Vulnerable Software and Affected Versions sentcms versions 4.0.x Description The issue allows remote attackers to cause arbitrary file uploads through an unauthorized file upload interface, resulting in PHP code execution through the "/user/upload/upload" API endpoint. Recommendations...

CVE-2022-24651: Unrestricted Upload of File with Dangerous Type

sentcms 4.0.x allows remote attackers to cause arbitrary file uploads through an unauthorized file upload interface, resulting in PHP code execution through /user/upload/upload...