PT-2023-11604

Name of the Vulnerable Software and Affected Versions DuxCMS version 2.1 Description A file upload issue allows attackers to execute arbitrary PHP code. The vulnerability is exploited via the duxcms/AdminUpload/upload endpoint, allowing attackers to upload malicious files. Recommendations For...