CVE-2021-36532

Publication date

2023-02-03 00:00:00

Family

mitre

State

PUBLISHED

Description

Race condition vulnerability discovered in portfolioCMS 1.0 allows remote attackers to run arbitrary code via fileExt parameter to localhost/admin/uploads.php.