PT-2018-14703

Name of the Vulnerable Software and Affected Versions EmpireCMS version 7.5 Description The issue allows remote attackers to upload and execute arbitrary code via directory traversal in a .php filename in the upload/e/admin/ecmscom.php path parameter. This can be achieved by using ..%2F directory...