Leptoncms vulnerabilities
3 known vulnerabilities in Leptoncms from Lepton-cms. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 8.8 High severity
Leptoncms: Unrestricted Upload of File with Dangerous Type
LeptonCMS version 7.3.0 contains an arbitrary file upload vulnerability, which is caused by the lack of proper validation for uploaded files. An authenticated attacker can exploit this vulnerability by uploading a specially crafted ZIP/PHP file to execute arbi
- 8.8 High severity
lepton: Unrestricted Upload of File with Dangerous Type
File Upload vulnerability in lepton v.7.1.0 allows a remote authenticated attackers to execute arbitrary code via uploading a crafted PHP file to the save.php and config.php component.
- 7.2 High severity
Leptoncms: Unrestricted Upload of File with Dangerous Type
An arbitrary file upload vulnerability in LEPTON v7.0.0 allows authenticated attackers to execute arbitrary PHP code by uploading this code to the backend/languages/index.php languages area.