Skip to content
CVE PROGRAM SOURCE RECORD6.3 Medium

CVE-2023-1484

xzjie cms upload unrestricted upload

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
VulDB

Description

A vulnerability was found in xzjie cms up to 1.0.3 and classified as critical. This issue affects some unknown processing of the file /api/upload. The manipulation of the argument uploadFile leads to unrestricted upload. The attack may be initiated remotely. The associated identifier of this vulnerability is VDB-223367.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

xzjie cms

  • 1.0.0affected
  • 1.0.1affected
  • 1.0.2affected
  • 1.0.3affected

References