| Title | LeptonCMS 7.2.0 Command Injection |
|---|
| Description | An Arbitrary File Upload vulnerability exists in LeptonCMS v7.2.0. This vulnerability is due to the application's lack of effective validation for uploaded files. An authenticated attacker can exploit this vulnerability to execute arbitrary code by uploading a specially crafted ZIP file.. |
|---|
| Source | ⚠️ https://github.com/CVE-Hunter-Leo/CVE/issues/6 |
|---|
| User | CW.Wong (UID 88449) |
|---|
| Submission | 08/11/2025 16:34 (1 Year ago) |
|---|
| Moderation | 08/13/2025 15:16 (2 days later) |
|---|
| Status | Duplicate |
|---|
| VulDB entry | 259032 [Lepton 7.1.0 PHP File unrestricted upload] |
|---|
| Points | 0 |
|---|