PT-2019-9470

Name of the Vulnerable Software and Affected Versions Monstra CMS version 3.0.4 Description The issue allows remote attackers to execute arbitrary PHP code via a mixed-case file extension. This is because the forbidden types variable is mishandled in the pluginsboxfilesmanagerfilesmanager.admin.p...