181 matches found
qdPM v7 Arbitrary PHP File Upload Vulnerability
This module exploits a vulnerability found in qdPM - a web-based project management software. The user profile's photo upload feature can be abused to upload any arbitrary file onto the victim server machine, which allows remote code execution. Please note in order to use this module, you must ha...
8.8CVSS8.4AI score0.14399EPSS
SaveExploits4
20