Security Advisory
CVE-2019-12548
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
Bludit before 3.9.0 allows remote code execution for an authenticated user by uploading a php file while changing the logo through /admin/ajax/upload-logo.