CVE-2024-39165

Published: 2024-07-04T13:15Z

Last Modified: 2024-12-04T16:15Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

QR/demoapp/qr_image.php in Asial JpGraph Professional through 4.2.6-pro allows remote attackers to execute arbitrary code via a PHP payload in the data parameter in conjunction with a .php file name in the filename parameter. This occurs because an unnecessary QR/demoapp folder.is shipped with the product. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt