high8.8
CVE-2016-5661
Accela Civic Platform Citizen Access portal relies on the client to restrict file types for uploads, which allows remote authenticated users to execute arbitra…
Impact
Accela Civic Platform Citizen Access portal relies on the client to restrict file types for uploads, which allows remote authenticated users to execute arbitrary code via modified _EventArgument and filename parameters.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Accela | Civic Platform Citizen Access Portal | All versions |