An issue was discovered in WTCMS 1.0. It allows remote attackers to execute arbitrary PHP code by going to the Setting -> Mailbox configuration -> Registration email template screen, and uploading an image file, as demonstrated by a .php filename and the Content-Type: image/gif header.
The product uses a name or reference to access a resource, but the name/reference resolves to a resource that is outside of the intended control sphere.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Wtcms | Wtcms_project | 1.0 (including) | 1.0 (including) |