Description
An issue was discovered in Pluck 4.7.9-dev1. It allows administrators to execute arbitrary code by using action=installmodule to upload a ZIP archive, which is then extracted and executed.
Unscored
CVE-2019-9050
EUVD-2019-18436GHSA-8cq2-4xp3-24v5
An issue was discovered in Pluck 4.7.9-dev1. It allows administrators to execute arbitrary code by using action=installmodule to upload a Z…
Published Feb 23, 2019 · Updated Aug 4, 2024 · Assigned by mitre