CVE-2018-18086: Unrestricted Upload of File with Dangerous Type

EmpireCMS v7.5 has an arbitrary file upload vulnerability in the LoadInMod function in e/class/moddofun.php, exploitable by logged-in users...

PT-2018-14340

Name of the Vulnerable Software and Affected Versions EmpireCMS version 7.5 Description The issue concerns an arbitrary file upload vulnerability located in the LoadInMod function within the e/class/moddofun.php file. This vulnerability can be exploited by users who are logged in. Recommendations...