| Titolo | LeptonCMS 7.2.0 Command Injection |
|---|
| Descrizione | An Arbitrary File Upload vulnerability exists in LeptonCMS v7.2.0. This vulnerability is due to the application's lack of effective validation for uploaded files. An authenticated attacker can exploit this vulnerability to execute arbitrary code by uploading a specially crafted ZIP file.. |
|---|
| Fonte | ⚠️ https://github.com/CVE-Hunter-Leo/CVE/issues/6 |
|---|
| Utente | CW.Wong (UID 88449) |
|---|
| Sottomissione | 11/08/2025 16:34 (1 Anno fa) |
|---|
| Moderazione | 13/08/2025 15:16 (2 days later) |
|---|
| Stato | Duplicato |
|---|
| Voce VulDB | 259032 [Lepton 7.1.0 PHP File escalationi di privilegi] |
|---|
| Punti | 0 |
|---|