← Back to CVE List
CVE-2021-42675
Published:
2022-06-14T17:15Z
Last Modified:
2024-11-21T06:27Z
Source:
MITRE CVE List
License:
MITRE-CVE-TOS
Kreado Kreasfero 1.5 does not properly sanitize uploaded files to the media directory. One can upload a malicious PHP file and obtain remote code execution. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt