Lucene search
PRIOn knowledge basePRION:CVE-2023-1971HistoryApr 10, 2023 - 5:15 p.m.
Server side request forgery (ssrf)
2023-04-1017:15:00
PRIOn knowledge base
www.prio-n.com
4
vulnerability
server-side
request forgery
critical
yuan1994
tpadmin
upload.php
remote attack
public disclosure
vdb-225408
unsupported
UNSUPPORTED WHEN ASSIGNED A vulnerability, which was classified as critical, was found in yuan1994 tpAdmin 1.3.12. Affected is the function remote of the file application\admin\controller\Upload.php. The manipulation of the argument url leads to server-side request forgery. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-225408. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.
Related
cve
cve
CVE-2023-1971
2023-04-10 17:15:06
github
github
yuan1994 tpAdmin vulnerable to Server-Side Request Forgery
2023-04-10 18:30:22
cvelist
cvelist
CVE-2023-1971 yuan1994 tpAdmin Upload.php remote server-side request forgery
2023-04-10 16:31:03
nvd
nvd
CVE-2023-1971
2023-04-10 17:15:06
osv
osv
yuan1994 tpAdmin vulnerable to Server-Side Request Forgery
2023-04-10 18:30:22
veracode
veracode
Server-Side Request Forgery (SSRF)
2023-04-18 10:51:58