PT-2024-28911 · Publiccms · Publiccms

Name of the Vulnerable Software and Affected Versions: PublicCMS version 4.0.202302.e Description: The issue concerns an arbitrary file upload vulnerability in the /admin/cmsWebFile/save component, allowing attackers to execute arbitrary code by uploading a crafted file. Recommendations: For...

CVE-2024-40546: Unrestricted Upload of File with Dangerous Type

An arbitrary file upload vulnerability in the component /admin/cmsWebFile/save of PublicCMS v4.0.202302.e allows attackers to execute arbitrary code via uploading a crafted file...