Security Advisory

CVE-2014-10074

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2018-08-27 04:00:00
Last updated 2024-08-06 14:02:38
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

Umbraco before 7.2.0 has a remote PHP code execution vulnerability because Umbraco.Web.UI/config/umbracoSettings.Release.config does not block the upload of .php files.