CVE-2019-11377

Published: 2019-04-20T15:29Z

Last Modified: 2024-11-21T04:20Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

wcms/wex/finder/action.php in WCMS v0.3.2 has a Arbitrary File Upload Vulnerability via developer/finder because .php is a valid extension according to the fm_get_text_exts function. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt