Description
Concrete5 before 8.5.3 allows Unrestricted Upload of File with Dangerous Type such as a .phar file.
Remediation
References
Related Vulnerabilities
WordPress Plugin Photo Gallery by 10Web-Mobile-Friendly Image Gallery Cross-Site Scripting (1.5.67)
MySQL CVE-2020-14846 Vulnerability (CVE-2020-14846)
WordPress Plugin Advanced Custom Fields (ACF) Arbitrary File Upload (5.12.2)
WordPress 3.3 Cross-Site Scripting Vulnerability (3.3)
WordPress Plugin FeedWordPress Cross-Site Scripting (2014.0805)