CVE-2018-18888

An issue was discovered in laravelCMS through 2018-04-02. \app\Http\Controllers\Backend\ProfileController.php allows upload of arbitrary PHP files because the file extension is not properly checked and uploaded files are not properly renamed...

EUVD-2018-10599

Malware in sbrugna...

CVE-2018-18888

An issue was discovered in laravelCMS through 2018-04-02. \app\Http\Controllers\Backend\ProfileController.php allows upload of arbitrary PHP files because the file extension is not properly checked and uploaded files are not properly renamed...

CVE-2018-18888

An issue was discovered in laravelCMS through 2018-04-02. \app\Http\Controllers\Backend\ProfileController.php allows upload of arbitrary PHP files because the file extension is not properly checked and uploaded files are not properly renamed...

Code injection

An issue was discovered in laravelCMS through 2018-04-02. \app\Http\Controllers\Backend\ProfileController.php allows upload of arbitrary PHP files because the file extension is not properly checked and uploaded files are not properly renamed...

CVE-2018-18888

The CVE-2018-18888 entry concerns laravelCMS prior to or through 2018-04-02 where the upload mechanism in app/Http/Controllers/Backend/ProfileController.php does not properly validate file extensions and does not rename uploaded files, allowing uploading of arbitrary PHP files. This is reported a...

CVE-2018-18888

An issue was discovered in laravelCMS through 2018-04-02. \app\Http\Controllers\Backend\ProfileController.php allows upload of arbitrary PHP files because the file extension is not properly checked and uploaded files are not properly renamed...

CVE-2018-18888: Unrestricted Upload of File with Dangerous Type

An issue was discovered in laravelCMS through 2018-04-02. \app\Http\Controllers\Backend\ProfileController.php allows upload of arbitrary PHP files because the file extension is not properly checked and uploaded files are not properly renamed...

PT-2018-14709

Name of the Vulnerable Software and Affected Versions laravelCMS versions prior to 2018-04-02 Description An issue was discovered that allows the upload of arbitrary PHP files. This is because the file extension is not properly checked and uploaded files are not properly renamed in the...