PT-2018-9775

Name of the Vulnerable Software and Affected Versions: POSCMS version 3.2.10 Description: The issue allows remote attackers to execute arbitrary PHP code. This is possible because an attacker can control the value of cache'setting''ucssocfg' in diymodulemembermodelsMember model.php and write this...