CVE-2019-11377

wcms/wex/finder/action.php in WCMS v0.3.2 has a Arbitrary File Upload Vulnerability via developer/finder because .php is a valid extension according to the…

published April 20, 2019

CVSS
—
EPSS
2%
Percentile
77.3
In the wild
Unconfirmed
What it is

wcms/wex/finder/action.php in WCMS v0.3.2 has a Arbitrary File Upload Vulnerability via developer/finder because .php is a valid extension according to the fm_get_text_exts function.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01718 · 77.3th percentile
Published
2019-04-20T14:36Z
EPSS history
Timeline
  • 20 APR 14:36Z
    wcms/wex/finder/action.php in WCMS v0.3.2 has a Arbitrary File Upload Vulnerability via developer/finder because .php is a valid extension according to the…
    cvelistv5