CVE-2020-26678

vFairs 3.3 is affected by Remote Code Execution. Any user logged in to a vFairs virtual conference or event can abuse the functionality to upload a profile picture in order to place a malicious PHP file on the server and gain code execution...

CVE-2020-26678

vFairs 3.3 is affected by Remote Code Execution. Any user logged in to a vFairs virtual conference or event can abuse the functionality to upload a profile picture in order to place a malicious PHP file on the server and gain code execution...

CVE-2020-26678

Affected software: vFairs 3.3. Vulnerability: Remote Code Execution via profile picture upload. A logged-in user can abuse the profile picture upload functionality to place a malicious PHP file on the server and achieve code execution. Impact details provided: CVSS data indicates high impact on c...