Security Advisory

CVE-2019-20183

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2020-01-09 21:21:24

Last updated 2024-08-05 02:39:08

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

uploadimage.php in Employee Records System 1.0 allows upload and execution of arbitrary PHP code because file-extension validation is only on the client side. The attacker can modify global.js to allow the .php extension.

← Browse all CVEs View on cve.org ↗