
drew-byte/SiempreCMS-File-Upload-Abuse
Releases0
An attacker can upload files to arbitrary directories under ../media/, including hidden ones. Though execution isn't possible, this can flood directories, exhaust disk space, and degrade performance or cause denial-of-service.