PT-2020-18386

Name of the Vulnerable Software and Affected Versions OctoberCMS versions 1.0.319 through 1.0.465 Description An attacker can exploit this issue to upload various file types, including jpg, jpeg, bmp, png, webp, gif, ico, css, js, woff, woff2, svg, ttf, eot, json, md, less, sass, scss, and xml...

PT-2020-18385

Name of the Vulnerable Software and Affected Versions OctoberCMS versions 1.0.319 through 1.0.465 Description An attacker can exploit this issue to delete arbitrary local files of an October CMS server. The issue is only exploitable by an authenticated backend user with the cms.manage assets...

PT-2020-18384

Name of the Vulnerable Software and Affected Versions OctoberCMS versions 1.0.319 through 1.0.465 Description An attacker can exploit this issue to read local files of an October CMS server. The issue is only exploitable by an authenticated backend user with the cms.manage assets permission...