Description (CNA)
PBXCoreREST/Controllers/Files/PostController.php in MikoPBX through 2024.1.114 allows uploading a PHP script to an arbitrary directory.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| MIKO / MikoPBX | affected 0 through 2024.1.114 |
CWE
CWE-23
References
- https://www.mikopbx.com/
- https://github.com/mikopbx/Core/commit/3ee785429d3f1b33c9ab387ef4221127c9b8c5f3
ADP enrichment
No English description supplied.
No references supplied.