PT-2017-19062

Name of the Vulnerable Software and Affected Versions KBVault Mysql Free Knowledge Base application package version 0.16a Description The issue allows an unauthenticated user to access file upload and deletion functionality through the FileExplorer/Explorer.aspx component. This can be exploited t...

CVE-2017-9602: Incorrect Permission Assignment for Critical Resource

KBVault Mysql Free Knowledge Base application package 0.16a comes with a FileExplorer/Explorer.aspx?id=/Uploads file-management component. An unauthenticated user can access the file upload and deletion functionality. Through this functionality, a user can upload an ASPX script to...