PT-2024-20384

Name of the Vulnerable Software and Affected Versions LeptonCMS version 7.0.0 Description An arbitrary file upload vulnerability allows authenticated attackers to execute arbitrary PHP code by uploading crafted PHP files to the backend/languages/index.php languages area. This enables the executio...

CVE-2024-24399: Unrestricted Upload of File with Dangerous Type

An arbitrary file upload vulnerability in LEPTON v7.0.0 allows authenticated attackers to execute arbitrary PHP code by uploading this code to the backend/languages/index.php languages area...