PT-2019-15110

Name of the Vulnerable Software and Affected Versions OTCMS version 3.85 Description The issue allows for arbitrary PHP code execution. This is due to insufficient blocking of certain SQL manipulations in the admin/sysCheckFile deal.php file, specifically not blocking the "into//outfile"...