CVE-2018-19798

Fleetco Fleet Maintenance Management FMM 1.2 and earlier allows uploading an arbitrary ".php" file with the application/x-php Content-Type to the accidentsadd.php?submit=1 URI, as demonstrated by the valueImages1 field, which leads to remote command execution on the remote server. Any authenticat...

CVE-2018-19798

Fleetco Fleet Maintenance Management FMM 1.2 and earlier allows uploading an arbitrary ".php" file with the application/x-php Content-Type to the accidentsadd.php?submit=1 URI, as demonstrated by the valueImages1 field, which leads to remote command execution on the remote server. Any authenticat...

CVE-2018-19798

The CVE-2018-19798 entry applies to Fleetco Fleet Maintenance Management (FMM) ≤1.2. An authenticated user can upload an arbitrary .php file (via accidents_add.php?submit=1, value_Images_1) with Content-Type application/x-php, leading to remote command execution on the remote server. The availabl...