An issue discovered in /admin.php in Pluck CMS 4.7.15 through 4.7.16-dev5 allows remote attackers to run arbitrary code via manage file functionality.
{
"versions": [
{
"introduced": "4.7.15"
},
{
"fixed": "4.7.16"
},
{
"introduced": "0"
},
{
"last_affected": "4.7.16-NA"
},
{
"introduced": "0"
},
{
"last_affected": "4.7.16-dev1"
},
{
"introduced": "0"
},
{
"last_affected": "4.7.16-dev2"
},
{
"introduced": "0"
},
{
"last_affected": "4.7.16-dev3"
},
{
"introduced": "0"
},
{
"last_affected": "4.7.16-dev4"
},
{
"introduced": "0"
},
{
"last_affected": "4.7.16-dev5"
}
]
}