Unrestricted PHP File Upload Over Body (CVE-2018-13038)

Unrestricted PHP File Upload Over Body...

CVE-2018-13038

OpenSID 18.06-pasca has an Unrestricted File Upload vulnerability via an Attachment Document in the article feature. This vulnerability leads to uploading arbitrary PHP code via a .php filename with the application/pdf Content-Type...

CVE-2018-13038

OpenSID 18.06-pasca has an Unrestricted File Upload vulnerability in the article feature’s Attachment Document, allowing an attacker to upload arbitrary PHP code using a .php filename with Content-Type: application/pdf. Root cause is unrestricted file upload in the attachment workflow; impact is ...