Kordil EDMS Command Execution Vulnerability

Kordil EDMS is a document control and management system. A remote code execution vulnerability exists in documentsadd.php in Kordil EDMS 2.2.60rc3 and earlier versions. The vulnerability stems from a .php file that can be uploaded to the Documents folder. A remote attacker could exploit this...

CVE-2020-13887: Unrestricted Upload of File with Dangerous Type

documentsadd.php in Kordil EDMS through 2.2.60rc3 allows Remote Command Execution because .php files can be uploaded to the documents folder...