KBVault MySQL Arbitrary File Upload Vulnerability

KBVault is a free knowledge base web application. An arbitrary file upload vulnerability exists in KBVault MySQL. An unauthenticated user can use the following URI: http://host/FileExplorer/Explorer.aspx?id=/Uploads访问文件上传 and delete function...

CVE-2017-9602

KBVault Mysql Free Knowledge Base application package 0.16a is affected by an arbitrary file upload vulnerability. The issue arises in the FileExplorer/Explorer.aspx component (id=/Uploads) which allows unauthenticated access to upload and delete functions. An attacker can upload an ASPX script t...

PT-2017-19062

Name of the Vulnerable Software and Affected Versions KBVault Mysql Free Knowledge Base application package version 0.16a Description The issue allows an unauthenticated user to access file upload and deletion functionality through the FileExplorer/Explorer.aspx component. This can be exploited t...

CVE-2017-9602: Incorrect Permission Assignment for Critical Resource

KBVault Mysql Free Knowledge Base application package 0.16a comes with a FileExplorer/Explorer.aspx?id=/Uploads file-management component. An unauthenticated user can access the file upload and deletion functionality. Through this functionality, a user can upload an ASPX script to...