CVE-2017-14840
Published Sep 28, 2017TeamWork TicketPlus allows Arbitrary File Upload in updateProfile.
Vendor archive
3 CVEs tagged to vendor teamworktec — 0 Critical, 3 High, 0 Medium, 0 Low, 0 Unrated.
TeamWork TicketPlus allows Arbitrary File Upload in updateProfile.
TeamWork Photo Fusion allows Arbitrary File Upload in changeAvatar and changeCover.
TeamWork Job Links allows Arbitrary File Upload in profileChange and coverChange.