| Package | Affected versions | Patched versions |
|---|---|---|
| timeline | = 2.81= 2.91= 2.94= 3.0.1= 3.0.3= 3.0.5= 3.1.1= 3.2.1= 3.5.1= 3.6.1= 3.7.1= 3.8.1= 4.2.1= 4.3.1= 4.9.1= 5.2.1= 6.0.1= 6.2.1= 6.2.3= 6.2.4= 6.2.6= 6.2.7= 6.2.71≤ 6.2.8 |
Unrestricted file upload vulnerability in the Manage Project functionality in Livetecs Timelive before 6.5.1 allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in a predictable directory in Uploads/.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free