CVE-2018-11392

An arbitrary file upload vulnerability in /classes/profile.class.php in Jigowatt "PHP Login & User Management" before 4.1.1, as distributed in the Envato Market, allows any remote authenticated user to upload .php files to the web server via a profile avatar field. This results in arbitrary code...

CVE-2018-11392

The CVE-2018-11392 vulnerability affects Jigowatt “PHP Login & User Management” (Envato Market) via /classes/profile.class.php. Versions before 4.1.1 allow any remote authenticated user to upload a .php file through the profile avatar field, resulting in arbitrary code execution when the uploaded...

PHP Login And User Management 4.1.0 Shell Upload Vulnerability

Exploit for php platform in category web applications Title PHP Login & User Management = 4.1.0 - Arbitrary File Upload CVE-2018-11392 Product PHP Login & User Management https://codecanyon.net/item/php-login-user-management/49008 CVE CVE-2018-11392 Credit Reginald Dodd Description An arbitrary...

PHP Login And User Management 4.1.0 Shell Upload

Title PHP Login & User Management = 4.1.0 - Arbitrary File Upload CVE-2018-11392 Product PHP Login & User Management https://codecanyon.net/item/php-login-user-management/49008 CVE CVE-2018-11392 Credit Reginald Dodd Description An arbitrary file upload vulnerability in /classes/profile.class.php...