Bludit before 3.9.0 allows remote code execution for an authenticated user by uploading a php file while changing the logo through /admin/ajax/upload-logo.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2019-06-03T20:38:32
Updated: 2024-08-04T23:24:38.650Z
Reserved: 2019-06-02T00:00:00
Link: CVE-2019-12548
Vulnrichment
No data.
NVD
Status : Analyzed
Published: 2019-06-03T21:29:00.707
Modified: 2021-07-21T11:39:23.747
Link: CVE-2019-12548
Redhat
No data.