critical9.8
CVE-2023-45856
qdPM 9.2 allows remote code execution by using the Add Attachments feature of Edit Project to upload a .php file to the /uploads URI.
Impact
qdPM 9.2 allows remote code execution by using the Add Attachments feature of Edit Project to upload a .php file to the /uploads URI.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Qdpm | Qdpm | Version 9.2 |