Description
Logicspice FAQ Script 2.9.7 allows uploading arbitrary files, which leads to remote command execution via admin/faqs/faqimages with a .php file.
Unscored
CVE-2018-19457
EUVD-2018-11147GHSA-6f5p-7f6x-mhq9
Logicspice FAQ Script 2.9.7 allows uploading arbitrary files, which leads to remote command execution via admin/faqs/faqimages with a .php …
Published Nov 22, 2018 · Updated Sep 17, 2024 · Assigned by mitre