22 matches found
CVE-2020-7246
A remote code execution RCE vulnerability exists in qdPM 9.1 and earlier. An attacker can upload a malicious PHP code file via the profile photo functionality, by leveraging a path traversal vulnerability in the users'photoppreview' delete photo feature, allowing bypass of .htaccess protection...
8.8CVSS8.8AI score0.83235EPSS
SaveExploits16References7
20