← Database

CVE-2021-36532

HIGH CVSS: 8.1 Published: 2023-02-03 Modified: 2026-06-17

Description

Race condition vulnerability discovered in portfolioCMS 1.0 allows remote attackers to run arbitrary code via fileExt parameter to localhost/admin/uploads.php.

Affected Platforms

Portfoliocms Project Portfoliocms

Weakness Type

CWE-362, CWE-362

References