CVE-2018-19692

An issue was discovered in tp5cms through 2017-05-25. admin.php/upload/picture.html allows remote attackers to execute arbitrary PHP code by uploading a .php file with the image/jpeg content type.

Score

CVSS 3.0 9.8 Critical

Status

Modified - cve@mitre.org

Published

2018-11-29

Last modified

2024-08-05

Weaknesses

CWE-434

Affected products

• Tp5cms (Tp5cms Project)

References

• https://github.com/fmsdwifull/tp5cms/issues/5