Arbitrary File Upload

Overview Affected versions of this package are vulnerable to Arbitrary File Upload via the chunkUpload function in UploadService.php. An attacker can upload arbitrary files by sending crafted requests to the affected endpoint. Remediation A fix was pushed into the master branch but not yet...

EUVD-2020-14555

Malware in sbrugna...

CVE-2020-21787

CRMEB 3.1.0+ is vulnerable to File Upload Getshell via /crmeb/crmeb/services/UploadService.php...

Unrestricted file upload

CRMEB 3.1.0+ is vulnerable to File Upload Getshell via /crmeb/crmeb/services/UploadService.php...