CVE-2019-9181
SchoolCMS version 2.3.1 allows file upload via the logo upload feature at admin.php?m=admin&c=site&a=save by using the .jpg extension, changing the Content-Type to image/php, and placing PHP code after the JPEG data. This ultimately allows execution of arbitrary PHP code.
- Score
- CVSS 3.0 7.2 High
- Status
- Modified - cve@mitre.org
- Published
- 2019-02-26
- Last modified
- 2024-08-04
- Weaknesses
- CWE-434
Affected products
References
- http://www.iwantacve.cn/index.php/archives/125/
