mirror of
https://github.com/0xMarcio/cve.git
synced 2026-05-27 18:42:36 +02:00
655 B
655 B
CVE-2019-11377
Description
wcms/wex/finder/action.php in WCMS v0.3.2 has a Arbitrary File Upload Vulnerability via developer/finder because .php is a valid extension according to the fm_get_text_exts function.
POC
Reference
Github
No PoCs found on GitHub currently.