Vulnerability — CVE-2023-45856

CVE-2023-45856

Reference to the description:: https://nvd.nist.gov/vuln/detail/CVE-2023-45856
Description:: qdPM 9.2 allows remote code execution by using the Add Attachments feature of Edit Project to upload a .php file to the /uploads URI.
Last updated date:: 10/19/2023

Type:: exploit
Confidence:: HIGH
Date of publishing:: 10/19/2023
Reference url to background: https://github.com/SunshineOtaku/Report-CVE/blob/main/qdPM/9.2/RCE.md