PT-2018-14965

Name of the Vulnerable Software and Affected Versions Logicspice FAQ Script version 2.9.7 Description The issue allows uploading arbitrary files, leading to remote command execution. This can be achieved via the "admin/faqs/faqimages" endpoint with a .php file. Recommendations For version 2.9.7,...

CVE-2018-19457: Unrestricted Upload of File with Dangerous Type

Logicspice FAQ Script 2.9.7 allows uploading arbitrary files, which leads to remote command execution via admin/faqs/faqimages with a .php file...