CVE-2022-25581

Classcms v2.5 and below contains an arbitrary file upload via the component \class\classupload. This vulnerability allows attackers to execute code injection via a crafted .txt file...

PT-2022-17382

Name of the Vulnerable Software and Affected Versions Classcms versions 2.5 and below Description The issue allows attackers to execute code injection via a crafted .txt file, leveraging an arbitrary file upload vulnerability in the classupload component. Recommendations For Classcms versions 2.5...

CVE-2022-25581: Unrestricted Upload of File with Dangerous Type

Classcms v2.5 and below contains an arbitrary file upload via the component \class\classupload. This vulnerability allows attackers to execute code injection via a crafted .txt file...