CVE-2018-18752

Webiness Inventory 2.3 suffers from an Arbitrary File upload vulnerability via PHP code in the protected/library/ajax/WsSaveToModel.php logo parameter.

Date published : 2018-10-28

https://packetstormsecurity.com/files/149982/Webiness-Inventory-2.9-Shell-Upload.html