TecnoVISION DLX Spot Player4 Arbitrary File Upload Vulnerability

TecnoVISION DLX Spot Player4 is a control management software for LED video walls from TecnoVISION Australia. An arbitrary file upload vulnerability exists in the resource.php file in TecnoVISION DLX Spot Player4 versions after 1.5.10. A remote attacker can exploit this vulnerability to upload...