PT-2019-13176

Name of the Vulnerable Software and Affected Versions Symphony CMS Rich Text Formatter Redactor extension versions through 1.1.1 Description The issue concerns an Unauthenticated arbitrary file upload vulnerability. This vulnerability is present in the content.fileupload.php and...

CVE-2019-13187: Unrestricted Upload of File with Dangerous Type

The Rich Text Formatter Redactor extension through v1.1.1 for Symphony CMS has an Unauthenticated arbitrary file upload vulnerability in content.fileupload.php and content.imageupload.php...