CVE-2019-15748: Unrestricted Upload of File with Dangerous Type

SITOS six Build v6.2.1 permits unauthorised users to upload and import a SCORM 2004 package by browsing directly to affected pages. An unauthenticated attacker could use the upload and import functionality to import a malicious SCORM package that includes a PHP file, which could execute arbitrary...

PT-2019-14368

Name of the Vulnerable Software and Affected Versions SITOS six Build version 6.2.1 Description The issue allows unauthorized users to upload and import a SCORM 2004 package by directly accessing affected pages. An unauthenticated attacker could exploit the upload and import functionality to impo...