Unscored CVE-2019-13973 EUVD-2019-5235GHSA-fjx8-gwwh-32r7

LayerBB 1.1.3 allows admin/general.php arbitrary file upload because the custom_logo filename suffix is not restricted, and .php may be use…

Published Jul 19, 2019 · Updated Aug 5, 2024 · Assigned by mitre

Description

LayerBB 1.1.3 allows admin/general.php arbitrary file upload because the custom_logo filename suffix is not restricted, and .php may be used.