CVE-2018-18752

Webiness Inventory 2.3 suffers from an Arbitrary File upload vulnerability via PHP code in the protected/library/ajax/WsSaveToModel.php logo parameter...

Webiness Inventory Arbitrary File Upload Vulnerability

Webiness Inventory is a set of PHP language development , Web-based inventory management system . A security vulnerability exists in the protected/library/ajax/WsSaveToModel.php file in Webiness Inventory version 2.3. A remote attacker can exploit this vulnerability to upload arbitrary files with...

CVE-2018-18752

Webiness Inventory 2.3 suffers from an Arbitrary File upload vulnerability via PHP code in the protected/library/ajax/WsSaveToModel.php logo parameter...

CVE-2018-18752

Webiness Inventory 2.3 suffers from an Arbitrary File upload vulnerability via PHP code in the protected/library/ajax/WsSaveToModel.php logo parameter...

PT-2018-14626

Name of the Vulnerable Software and Affected Versions Webiness Inventory version 2.3 Description The issue allows for an Arbitrary File upload via PHP code in the protected/library/ajax/WsSaveToModel.php, specifically through the logo parameter. Recommendations For version 2.3, consider restricti...

CVE-2018-18752: Unrestricted Upload of File with Dangerous Type

Webiness Inventory 2.3 suffers from an Arbitrary File upload vulnerability via PHP code in the protected/library/ajax/WsSaveToModel.php logo parameter...