CVE-2019-17575

A file-rename filter bypass exists in admin/media/rename.php in WBCE CMS 1.4.0 and earlier. This can be exploited by an authenticated user with admin privileges to rename a media filename and extension. For example: place PHP code in a .jpg file, and then change the file's base name to filename.p...

CVE-2019-17575: Use of Incorrectly-Resolved Name or Reference

A file-rename filter bypass exists in admin/media/rename.php in WBCE CMS 1.4.0 and earlier. This can be exploited by an authenticated user with admin privileges to rename a media filename and extension. For example: place PHP code in a .jpg file, and then change the file's base name to filename.p...

PT-2019-15208

Name of the Vulnerable Software and Affected Versions WBCE CMS versions 1.4.0 and earlier Description A file-rename filter bypass issue exists in the admin/media/rename.php file. This can be exploited by an authenticated user with admin privileges to rename a media filename and extension,...