Php Login & User Management

php_login_&_user_management

Vendor: Jigowatt • 1 CVE

CVEs (1)

CVE

VENDORS

PRODUCTS

UPDATED

PUBLISHED

CVSS

CVE-2018-11392

1Jigowatt

1Php Login & User Management

Nov 21, 2024

May 29, 2018

N/A· v4

8.8 HIGH· v3

6.5 MEDIUM· v2

An arbitrary file upload vulnerability in /classes/profile.class.php in Jigowatt "PHP Login & User Management" before 4.1.1, as distributed in the Envato Market, allows any remote authenticated user to upload .php files to the web server via a profile avatar field. This results in arbitrary code execution by requesting the .php file.Show less