CVE-2018-15601

Published August 21st, 2018

View on NVD ↗

CVSS v3

N/A

CVSS v2

7.5

HIGH

Affected

PROJECT

Description

apps/filemanager/handlers/upload/drop.php in Elefant CMS 2.0.3 performs a urldecode step too late in the "Cannot upload executable files" protection mechanism.

jbroadway/elefant

Elefant, the refreshingly simple PHP CMS and web framework.

GitHub

211