PT-2018-9888

Name of the Vulnerable Software and Affected Versions: b3log Symphony aka Sym version 2.6.0 Description: The issue allows remote attackers to upload and execute arbitrary JSP files. This is achieved via the name parameter to the "/upload" URI. Recommendations: For version 2.6.0, consider...