| Package | Affected versions | Patched versions |
|---|---|---|
| perch | = 3.2 |
Perch CMS 3.2 contains a remote code execution vulnerability that allows authenticated administrators to upload arbitrary PHP files through the assets management interface. Attackers can upload a malicious .phar file with embedded system command execution capabilities to execute arbitrary commands on the server.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free