The vulnerability in the “One Portal for Housing Fund Monitoring” platform, related to insufficient verification of the types of uploaded files, allows a perpetrator to execute arbitrary codes.

The vulnerability in the “One Portal for Housing Fund Monitoring” platform is related to insufficient verification of the types of files being uploaded. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code by uploading a specially crafted php file with the extensi...

CVE-2018-10942: Unrestricted Upload of File with Dangerous Type

modules/attributewizardpro/fileupload.php in the Attribute Wizard addon 1.6.9 for PrestaShop 1.4.0.1 through 1.6.1.18 allows remote attackers to execute arbitrary code by uploading a .phtml file...