PT-2019-19760

Name of the Vulnerable Software and Affected Versions Feng Office version 3.7.0.5 Description The issue allows remote attackers to execute arbitrary code. This can be achieved by using "!--exec cmd=" in a .shtml file to access the ck upload handler.php API endpoint. Recommendations For Feng Offic...