CVE-2024-39165

QR/demoapp/qrimage.php in Asial JpGraph Professional through 4.2.6-pro allows remote attackers to execute arbitrary code via a PHP payload in the data parameter in conjunction with a .php file name in the filename parameter. This occurs because an unnecessary QR/demoapp folder.is shipped with the...

CVE-2024-39165

Summary: CVE-2024-39165 affects Asial JpGraph Professional up to version 4.2.6-pro. The vulnerability arises from the presence of an unnecessary QR/demoapp folder, enabling a remote attacker to execute arbitrary PHP code via a payload placed in the data parameter and a .php filename in the filena...