PT-2018-14856

Name of the Vulnerable Software and Affected Versions XiaoCms version 20141229 Description An issue allows remote attackers to execute arbitrary code by bypassing restrictions on uploaded file types, such as jpg, jpeg, bmp, png, and gif, using the type parameter. This can be demonstrated by...

PT-2012-2031

Name of the Vulnerable Software and Affected Versions WP Symposium plugin versions prior to 11.12.24 Description The issue allows remote attackers to execute arbitrary code by uploading a file with an executable extension using "uploadify/upload admin avatar.php" or "uploadify/upload profile...