CVE-2018-18888

An issue was discovered in laravelCMS through 2018-04-02. \app\Http\Controllers\Backend\ProfileController.php allows upload of arbitrary PHP files because the file extension is not properly checked and uploaded files are not properly renamed...

CVE-2018-18888

The CVE-2018-18888 entry concerns laravelCMS prior to or through 2018-04-02 where the upload mechanism in app/Http/Controllers/Backend/ProfileController.php does not properly validate file extensions and does not rename uploaded files, allowing uploading of arbitrary PHP files. This is reported a...