high7.2
CVE-2018-19457
Logicspice FAQ Script 2.9.7 allows uploading arbitrary files, which leads to remote command execution via admin/faqs/faqimages with a .php file.
Impact
Logicspice FAQ Script 2.9.7 allows uploading arbitrary files, which leads to remote command execution via admin/faqs/faqimages with a .php file.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Logicspice | Faq Script | Version 2.9.7 |