Posté par: igor51 le octobre 22, 2018, 16:00:07
The flaw in the popular file uploader allows an attacker to upload files and run their own command line shell on any affected server.
Source: Popular website plugin harboured a serious 0-day for years (http://feedproxy.google.com/~r/nakedsecurity/~3/qshlaEwMlP4/)