Skip to content
OpenAdvisories
Unscored CVE-2020-21356 EUVD-2020-14128GHSA-2pqp-x768-f3m2

An information disclosure vulnerability in upload.php of PopojiCMS 1.2 leads to physical path disclosure of the host when 'name = "file" is…

Published Aug 6, 2021 · Updated Aug 4, 2024 · Assigned by mitre

Description

An information disclosure vulnerability in upload.php of PopojiCMS 1.2 leads to physical path disclosure of the host when 'name = "file" is deleted during file uploads.

References