qdPM 9.2 allows remote code execution by using the Add Attachments feature of Edit Project to upload a .php file to the /uploads URI.

Published Oct 14, 2023 · Updated Sep 17, 2024 · Assigned by mitre