PT-2018-13237

Name of the Vulnerable Software and Affected Versions portfolioCMS version 1.0.5 Description An issue was discovered that allows CSRF to create new pages. This can be done via the "admin/portfolio.php?newpage=true" endpoint. Recommendations For portfolioCMS version 1.0.5, consider implementing CS...

PT-2018-11088

Name of the Vulnerable Software and Affected Versions portfolioCMS version 1.0.5 Description The issue allows the upload of arbitrary .php files via the "admin/portfolio.php?newpage=true" API endpoint. This could potentially lead to unauthorized code execution. Recommendations For portfolioCMS...