CVE-2020-21356

An information disclosure vulnerability in upload.php of PopojiCMS 1.2 leads to physical path disclosure of the host when 'name = "file" is deleted during file uploads...

CVE-2020-21356

An information disclosure vulnerability in upload.php of PopojiCMS 1.2 leads to physical path disclosure of the host when 'name = "file" is deleted during file uploads...

CVE-2020-21356

An information disclosure vulnerability in upload.php of PopojiCMS 1.2 leads to physical path disclosure of the host when 'name = "file" is deleted during file uploads...

CVE-2020-21356

The CVE concerns PopojiCMS 1.2. An information disclosure in upload.php allows disclosure of the host’s physical path when a file upload is performed and the code deletes the form field name = "file". The underlying cause is a misstep in handling or validating uploaded filenames/paths during the ...