| Package | Affected versions | Patched versions |
|---|---|---|
| etomite | = 0.6≤ 0.6.1 |
Unrestricted file upload vulnerability in manager/media/ibrowser/scripts/rfiles.php in Etomite CMS 0.6.1 and earlier allows remote attackers to upload and execute arbitrary files via an nfile[] parameter with a filename that contains a .php extension followed by a valid image extension such as .gif or .jpg, then calling the rename function.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free