PT-2019-12639

Name of the Vulnerable Software and Affected Versions PHP-Fusion version 9.03.00 Description The issue allows remote authenticated users to execute arbitrary code. This is due to the mishandling of executable files during avatar upload in the includes/dynamics/includes/form fileinput.php and...