3 matches found
CVE-2019-10874
Cross Site Request Forgery CSRF in the bolt/upload File Upload feature in Bolt CMS 3.6.6 allows remote attackers to execute arbitrary code by uploading a JavaScript file to include executable extensions in the file/edit/config/config.yml configuration file...
PT-2019-12067
Name of the Vulnerable Software and Affected Versions Bolt CMS version 3.6.6 Description The issue allows remote attackers to execute arbitrary code by uploading a JavaScript file to include executable extensions in the file/edit/config/config.yml configuration file through the bolt/upload File...
CVE-2019-10874: Cross-Site Request Forgery (CSRF)
Cross Site Request Forgery CSRF in the bolt/upload File Upload feature in Bolt CMS 3.6.6 allows remote attackers to execute arbitrary code by uploading a JavaScript file to include executable extensions in the file/edit/config/config.yml configuration file...