by-night sms V1.0 has an Arbitrary File Upload vulnerability. The /api/sms/upload/headImg endpoint allows uploading arbitrary files. Users can upload files of any size and type...
8.8CVSS5.9AI score0.00374EPSS
SaveExploits1References2
Vulnrichment•added 2025/09/16 12:0 a.m.•1 views
CVE-2025-56263
by-night sms V1.0 has an Arbitrary File Upload vulnerability. The /api/sms/upload/headImg endpoint allows uploading arbitrary files. Users can upload files of any size and type...