critical9.8
CVE-2018-15601
apps/filemanager/handlers/upload/drop.php in Elefant CMS 2.0.3 performs a urldecode step too late in the "Cannot upload executable files" protection mechanism.
Impact
apps/filemanager/handlers/upload/drop.php in Elefant CMS 2.0.3 performs a urldecode step too late in the "Cannot upload executable files" protection mechanism.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Elefantcms | Elefantcms | Version 2.0.3 |