CyberRota Analysis
AI-GeneratedThe vulnerability allows attackers to bypass server-side file type restrictions on the TMS file upload endpoint, enabling the upload and execution of arbitrary PHP files on the web server. This critical flaw poses a significant risk of remote code execution, potentially compromising the integrity and confidentiality of the affected system. Organizations utilizing the TMS platform should prioritize immediate remediation to mitigate the risk of exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
The TMS file upload endpoint fails to enforce server-side file type restrictions, allowing an attacker to upload and execute arbitrary PHP files on the web server.