PT-2015-4231

Name of the Vulnerable Software and Affected Versions CformsII plugin versions 14.7 and earlier Description The issue allows remote attackers to execute arbitrary code by uploading a file with an executable extension via the cf uploadfile2 parameter, then accessing the file via a direct request t...