CVE-2022-32994

Halo CMS v1.5.3 was discovered to contain an arbitrary file upload vulnerability via the component /api/admin/attachments/upload...

CVE-2022-32994: Unrestricted Upload of File with Dangerous Type

Halo CMS v1.5.3 was discovered to contain an arbitrary file upload vulnerability via the component /api/admin/attachments/upload...

PT-2022-21628

Name of the Vulnerable Software and Affected Versions Halo CMS version 1.5.3 Description The issue is related to an arbitrary file upload vulnerability. This vulnerability can be exploited via the /api/admin/attachments/upload API endpoint. Recommendations For Halo CMS version 1.5.3, consider...

Chadha PHPKB Cross-Site Scripting Vulnerability (CNVD-2020-17215)

Chadha PHPKB is a knowledge base software that keeps information organized, accessible and manageable for internal teams and external clients. A reflected cross-site scripting vulnerability exists in admin/index-attachments.php in Chadha PHPKB Standard Multilingual Version 9. The vulnerability...