PT-2020-19496 · Qdpm · Qdpm

Name of the Vulnerable Software and Affected Versions: qdPM versions 9.1 and earlier Description: A remote code execution issue exists, allowing an attacker to upload malicious PHP code via the profile photo functionality. This is possible due to a path traversal vulnerability in the users'photop...