CVE-2019-25480

ARMBot has an unrestricted file upload vulnerability in upload.php, enabling unauthenticated attackers to upload PHP files via path traversal (e.g., ../public_html/) to the web root and achieve remote code execution. Affected: ARMBot web app; root cause: unrestricted file upload with path travers...