CVE-2019-12548
Bludit before 3.9.0 allows remote code execution for an authenticated user by uploading a php file while changing the logo through /admin/ajax/upload-logo.
Published: 2019-06-03 · CVSS: Unscored
Bludit before 3.9.0 allows remote code execution for an authenticated user by uploading a php file while changing the logo through /admin/ajax/upload-logo.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7