Lucene search

K
osvGoogleOSV:GHSA-VHGR-GFX3-FG37
HistoryApr 01, 2022 - 12:00 a.m.

Unrestricted Upload of File with Dangerous Type in WPanel 4

2022-04-0100:00:41
Google
osv.dev
12
wpanel
file upload
rce
vulnerability

EPSS

0.03

Percentile

91.1%

Multiple Remote Code Execution (RCE) vulnerabilities exist in WPanel 4 4.3.1 and below via a malicious PHP file upload to (1) Dashboard’s Avatar image, (2) Posts Folder image, (3) Pages Folder image and (4) Gallery Folder image.

EPSS

0.03

Percentile

91.1%

Related for OSV:GHSA-VHGR-GFX3-FG37