CVE-2024-28105

CVE-2024-28105 concerns phpMyFAQ where the category image upload feature can be abused by manipulating Content-Type and lang to store a PHP file, potentially enabling remote code execution (RCE). The public details describe that by submitting a crafted image upload request, an attacker can bypass...