Advanced HRM Remote Code Execution Vulnerability

Advanced HRM is a human resource management system. A security vulnerability exists in Advanced HRM version 1.6. A remote attacker can exploit the vulnerability by sending a .php file with PHP code to the user/update-user-avatar URI to execute code...