← Back to CVE List

CVE-2018-19104

Published: 2018-11-08T08:29Z
Last Modified: 2024-11-21T03:57Z
Source: MITRE CVE List
License: MITRE-CVE-TOS
In BageCMS 3.1.3, upload/index.php has a CSRF vulnerability that can be used to upload arbitrary files and get server privileges. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt