| Titre | LeptonCMS 7.2.0 Command Injection |
|---|
| Description | An Arbitrary File Upload vulnerability exists in LeptonCMS v7.2.0. This vulnerability is due to the application's lack of effective validation for uploaded files. An authenticated attacker can exploit this vulnerability to execute arbitrary code by uploading a specially crafted ZIP file.. |
|---|
| La source | ⚠️ https://github.com/CVE-Hunter-Leo/CVE/issues/6 |
|---|
| Utilisateur | CW.Wong (UID 88449) |
|---|
| Soumission | 11/08/2025 16:34 (il y a 1 Année) |
|---|
| Modérer | 13/08/2025 15:16 (2 days later) |
|---|
| Statut | Dupliqué |
|---|
| Entrée VulDB | 259032 [Lepton 7.1.0 PHP File élévation de privilèges] |
|---|
| Points | 0 |
|---|