CVE-2018-18752

Webiness Inventory 2.3 suffers from an Arbitrary File upload vulnerability via PHP code in the protected/library/ajax/WsSaveToModel.php logo parameter.

Score

CVSS 3.0 9.8 Critical

Status

Modified - cve@mitre.org

Published

2018-10-29

Last modified

2024-09-16

Weaknesses

CWE-434

Affected products

• Webiness Inventory (Webiness Project)

References

• https://packetstormsecurity.com/files/149982/Webiness-Inventory-2.9-Shell-Upload.html