| Package | Affected versions | Patched versions |
|---|---|---|
| memht portal | = 1.0= 1.5= 2.0= 2.5= 2.9= 3.0= 3.1= 3.2= 3.3= 3.4= 3.4.5= 3.5.0= 3.6.0= 3.6.5= 3.7.0= 3.7.5= 3.8.0= 3.8.1= 3.8.5= 3.9.0≤ 4.0.1 |
Unrestricted file upload vulnerability in index.php in Miltenovik Manojlo MemHT Portal 4.0.1 and earlier allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension and an image content type via a users editProfile action, then accessing this file via a direct request to the file in images/avatar/uploaded/.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free