CVE-2018-12491

Published June 15th, 2018

View on NVD ↗

CVSS v3

N/A

CVSS v2

7.5

HIGH

Affected

PROJECT

Description

PHPOK 4.9.032 has an arbitrary file upload vulnerability in the import_f function in framework/admin/modulec_control.php, as demonstrated by uploading a .php file within a .php.zip archive, a similar issue to CVE-2018-8944.

l1nk3rlin/php_code_audit_project

该项目用来记录，我用来练手的PHP代码审计项目。

GitHub

192