Skip to content
Threat Feed
Subscribe

Product

Kemana Directory (<= 1.5.6)

1 brief RSS
high advisory

C97net qEngine CMS, Kemana Directory, and Cart Engine: Unrestricted File Upload Remote Code Execution (CVE-2014-125138)

C97net qEngine CMS, Kemana Directory, and Cart Engine are vulnerable to an unrestricted file upload flaw allowing authenticated Editor-role users to achieve remote code execution.

qEngine CMS +2
1r 2t 1c