DuxCMS code-related vulnerabilities

DuxCMS is an open source content management system. A security vulnerability exists in DuxCMS version 2.1, which stems from a file upload vulnerability that allows an attacker to execute arbitrary php code via duxcms/AdminUpload/upload...

PT-2023-11604

Name of the Vulnerable Software and Affected Versions DuxCMS version 2.1 Description A file upload issue allows attackers to execute arbitrary PHP code. The vulnerability is exploited via the duxcms/AdminUpload/upload endpoint, allowing attackers to upload malicious files. Recommendations For...