| Package | Affected versions | Patched versions |
|---|---|---|
| fleet maintenance management | ≤ 1.2 |
Fleetco Fleet Maintenance Management (FMM) 1.2 and earlier allows uploading an arbitrary ".php" file with the application/x-php Content-Type to the accidents_add.php?submit=1 URI, as demonstrated by the value_Images_1 field, which leads to remote command execution on the remote server. Any authenticated user can exploit this.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free