Laravelcms

laravelcms

Vendor: Laravelcms Project • 1 CVE

CVEs (1)

CVE

VENDORS

PRODUCTS

UPDATED

PUBLISHED

CVSS

CVE-2018-18888

1Laravelcms Project

1Laravelcms

Nov 21, 2024

Nov 1, 2018

N/A· v4

9.8 CRITICAL· v3

7.5 HIGH· v2

An issue was discovered in laravelCMS through 2018-04-02. \app\Http\Controllers\Backend\ProfileController.php allows upload of arbitrary PHP files because the file extension is not properly checked and uploaded files are...Show more