PT-2019-19717

Name of the Vulnerable Software and Affected Versions SchoolCMS version 2.3.1 Description The issue allows for file upload via the theme upload feature at "admin.php?m=admin&c=theme&a=upload" by exploiting the mishandling in the Upload function of the ThemeController.class.php file. This can be...