Description
LaikeTui 3.5.0 allows remote authenticated users to execute arbitrary PHP code by using index.php?module=system&action=pay to upload a ZIP archive containing a .php file, as demonstrated by the ../../../../phpinfo.php pathname.
Unscored
CVE-2021-34128
EUVD-2021-20791GHSA-q4jj-x7h4-55rf
LaikeTui 3.5.0 allows remote authenticated users to execute arbitrary PHP code by using index.php?module=system&action=pay to upload a ZIP …
Published Jun 15, 2021 · Updated Aug 4, 2024 · Assigned by mitre