2 matches found
Race condition
Race condition vulnerability discovered in portfolioCMS 1.0 allows remote attackers to run arbitrary code via fileExt parameter to localhost/admin/uploads.php...
CVE-2021-36532
The CVE-2021-36532 entry describes a race-condition vulnerability in portfolioCMS 1.0 that enables remote code execution via the fileExt parameter at localhost/admin/uploads.php. The issue is documented across multiple feeds (NVD, Red Hat, CNVD, CNNVD, OSV, etc.) with a CVSS v3.1 base score of 8....