CVE-2023-46428

An arbitrary file upload vulnerability in HadSky v7.12.10 allows attackers to execute arbitrary code via a crafted file...

CVE-2023-46428

An arbitrary file upload vulnerability in HadSky v7.12.10 allows attackers to execute arbitrary code via a crafted file...

CVE-2023-46428

An arbitrary file upload vulnerability in HadSky v7.12.10 allows attackers to execute arbitrary code via a crafted file...

Design/Logic Flaw

An arbitrary file upload vulnerability in HadSky v7.12.10 allows attackers to execute arbitrary code via a crafted file...

HadSky Code Issues Vulnerabilities

HadSky is an original open source php light forum system from China's HadSky company. A security vulnerability exists in HadSky version v7.12.10, which stems from an arbitrary file upload vulnerability that allows an attacker to execute arbitrary code via a crafted file...

PT-2023-30024 · Hadsky · Hadsky

Name of the Vulnerable Software and Affected Versions: HadSky version 7.12.10 Description: An arbitrary file upload issue allows attackers to execute arbitrary code via a crafted file. Recommendations: For HadSky version 7.12.10, update to a version that fixes this issue to prevent arbitrary code...

CVE-2023-46428

An arbitrary file upload vulnerability in HadSky v7.12.10 allows attackers to execute arbitrary code via a crafted file...

CVE-2023-46428

An arbitrary file upload vulnerability in HadSky v7.12.10 allows attackers to execute arbitrary code via a crafted file...

CVE-2023-46428

CVE-2023-46428 affects HadSky v7.12.10. The issue is an arbitrary file upload vulnerability in HadSky’s upload handling that allows an attacker to execute arbitrary code via a crafted file. The vulnerability is described consistently across multiple sources (NVD, Red Hat, PRION, PT Security), wit...

CVE-2023-3579

A vulnerability, which was classified as problematic, has been found in HadSky 7.11.8. Affected by this issue is some unknown functionality of the component User Handler. The manipulation leads to cross-site request forgery. The attack may be launched remotely. The exploit has been disclosed to t...

CVE-2023-3579

A vulnerability, which was classified as problematic, has been found in HadSky 7.11.8. Affected by this issue is some unknown functionality of the component User Handler. The manipulation leads to cross-site request forgery. The attack may be launched remotely. The exploit has been disclosed to t...

Cross site request forgery (csrf)

A vulnerability, which was classified as problematic, has been found in HadSky 7.11.8. Affected by this issue is some unknown functionality of the component User Handler. The manipulation leads to cross-site request forgery. The attack may be launched remotely. The exploit has been disclosed to t...

CVE-2023-3579 HadSky User cross-site request forgery

A vulnerability, which was classified as problematic, has been found in HadSky 7.11.8. Affected by this issue is some unknown functionality of the component User Handler. The manipulation leads to cross-site request forgery. The attack may be launched remotely. The exploit has been disclosed to t...

CVE-2023-3579 HadSky User cross-site request forgery

A vulnerability, which was classified as problematic, has been found in HadSky 7.11.8. Affected by this issue is some unknown functionality of the component User Handler. The manipulation leads to cross-site request forgery. The attack may be launched remotely. The exploit has been disclosed to t...

CVE-2023-3579

CVE-2023-3579 affects HadSky 7.11.8, specifically the User Handler component. The issue allows cross-site request forgery (CSRF) via an issue in a user-facing function; the attack is remote and exploits have been disclosed publicly. The connected sources consistently identify the vulnerability as...

PT-2023-25315 · Hadsky · Hadsky

Name of the Vulnerable Software and Affected Versions: HadSky version 7.11.8 Description: A problematic issue has been found in the User Handler component, leading to cross-site request forgery. The manipulation can be launched remotely. Recommendations: For HadSky version 7.11.8, at the moment,...

HadSky 跨站请求伪造漏洞

HadSky is an original open source php light forum system from China's HadSky company. A cross-site request forgery vulnerability exists in HadSky version 7.11.8, which stems from the component User Handler that causes cross-site request forgery...

CVE-2023-1685

A vulnerability was found in HadSky up to 7.11.8. It has been declared as critical. This vulnerability affects unknown code of the file /install/index.php of the component Installation Interface. The manipulation leads to command injection. The attack can be initiated remotely. The exploit has be...

CVE-2023-1685

A vulnerability was found in HadSky up to 7.11.8. It has been declared as critical. This vulnerability affects unknown code of the file /install/index.php of the component Installation Interface. The manipulation leads to command injection. The attack can be initiated remotely. The exploit has be...

Command injection

A vulnerability was found in HadSky up to 7.11.8. It has been declared as critical. This vulnerability affects unknown code of the file /install/index.php of the component Installation Interface. The manipulation leads to command injection. The attack can be initiated remotely. The exploit has be...