CVE-2018-18930

The CVE-2018-18930 entry describes an arbitrary file upload vulnerability in Tightrope Media Carousel (7.0.4.104) within the Manage Bulletins/Upload feature. An authenticated attacker can craft a ZIP (based on an exported Bulletin backup) containing a malicious file; the system only checks for re...