| Package | Affected versions | Patched versions |
|---|---|---|
| projectsend | = 100= 102= 105= 110= 155= 156= 157= 161= 180= 335= 375= 405= 412= 514= 561 |
Unrestricted file upload vulnerability in process-upload.php in ProjectSend (formerly cFTP) r100 through r561 allows remote attackers to execute arbitrary PHP code by uploading a file with a PHP extension, then accessing it via a direct request to the file in the upload/files/ or upload/temp/ directory.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free