| Título | LeptonCMS 7.2.0 Command Injection |
|---|
| Descripción | An Arbitrary File Upload vulnerability exists in LeptonCMS v7.2.0. This vulnerability is due to the application's lack of effective validation for uploaded files. An authenticated attacker can exploit this vulnerability to execute arbitrary code by uploading a specially crafted ZIP file.. |
|---|
| Fuente | ⚠️ https://github.com/CVE-Hunter-Leo/CVE/issues/6 |
|---|
| Usuario | CW.Wong (UID 88449) |
|---|
| Sumisión | 2025-08-11 16:34 (hace 1 Año) |
|---|
| Moderación | 2025-08-13 15:16 (2 days later) |
|---|
| Estado | Duplicado |
|---|
| Entrada de VulDB | 259032 [Lepton 7.1.0 PHP File escalada de privilegios] |
|---|
| Puntos | 0 |
|---|