Skip to content
CVE PROGRAM SOURCE RECORD9.9 Critical

CVE-2020-11011

RCE via file upload in Phproject

Description

In Phproject before version 1.7.8, there's a vulnerability which allows users with access to file uploads to execute arbitrary code. This is patched in version 1.7.8.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Alanaktion Phproject

  • < 1.7.8affected

References