PT-2024-26527 · Unknown · Farcry Core

Name of the Vulnerable Software and Affected Versions: FarCry Core framework versions prior to 7.2.14 Description: The issue allows attackers to execute arbitrary code via uploading a crafted .cfm file to the /fileupload/upload.cfm endpoint. Recommendations: For versions prior to 7.2.14, update t...