high8.1
CVE-2021-36532
Race condition vulnerability discovered in portfolioCMS 1.0 allows remote attackers to run arbitrary code via fileExt parameter to localhost/admin/uploads.php.
Impact
Race condition vulnerability discovered in portfolioCMS 1.0 allows remote attackers to run arbitrary code via fileExt parameter to localhost/admin/uploads.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Portfoliocms Project | Portfoliocms | Version 1.0.0 |