| Package | Affected versions | Patched versions |
|---|---|---|
| e-xoops | = 1.05r3 | |
| runcms | = 1.1= 1.1a |
RUNCMS 1.1A, and possibly other products based on e-Xoops (exoops), when "Allow custom avatar upload" is enabled, does not properly verify uploaded files, which allows remote attackers to upload arbitrary files.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free