Laurentiu Matei eXpandable Home Page (XHP) CMS 0.5 and previous versions allows remote authenticated users to use the HTMLArea FileManager plugin to upload and execute arbitrary PHP files using (1) manager.php, (2) standalonemanager.php, and (3) images.php.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
xhp cms |