EUVD-2019-3055

Malware in sbrugna...

CVE-2019-11377: Unrestricted Upload of File with Dangerous Type

wcms/wex/finder/action.php in WCMS v0.3.2 has a Arbitrary File Upload Vulnerability via developer/finder because .php is a valid extension according to the fmgettextexts function...

PT-2019-12268

Name of the Vulnerable Software and Affected Versions WCMS version 0.3.2 Description The issue concerns an arbitrary file upload vulnerability. This is due to the fm get text exts function considering .php as a valid extension, allowing for potential malicious file uploads via the developer/finde...