Lucene search
K

87 matches found

NVD
NVD
added 2023/03/06 9:15 p.m.8 views

CVE-2023-26949

An arbitrary file upload vulnerability in the component /admin1/config/update of onekeyadmin v1.3.9 allows attackers to execute arbitrary code via a crafted PHP file...

9.8CVSS9.6AI score0.0076EPSS
Exploits1References1
Prion
Prion
added 2023/03/06 9:15 p.m.8 views

Privilege escalation

An arbitrary file upload vulnerability in the component /admin1/config/update of onekeyadmin v1.3.9 allows attackers to execute arbitrary code via a crafted PHP file...

7.5CVSS9.5AI score0.0076EPSS
Exploits1References1Affected Software1
CNNVD
CNNVD
added 2023/03/06 12:0 a.m.2 views

OneKeyAdmin 代码问题漏洞

OneKeyAdmin is About plug-in management system based on Thinkphp6+Element, website, applets, malls, CMS, APP, ERP, API interface a system to get it all done, no scaffolding out of the box! OneKeyAdmin v1.3.9 version of the existence of security vulnerabilities , the vulnerability stems from the...

9.8CVSS8.8AI score0.0076EPSS
Exploits1References2
Vulnrichment
Vulnrichment
added 2023/03/06 12:0 a.m.3 views

CVE-2023-26949

An arbitrary file upload vulnerability in the component /admin1/config/update of onekeyadmin v1.3.9 allows attackers to execute arbitrary code via a crafted PHP file...

8AI score0.0076EPSS
Exploits1References1
CVE
CVE
added 2023/03/06 12:0 a.m.46 views

CVE-2023-26949

CVE-2023-26949 affects onekeyadmin v1.3.9; the arbitrary file upload flaw in /admin1/config/update allows executing arbitrary PHP code. Connected sources corroborate the issue, but no patch/version remediation details are provided in the supplied documents. Exploitation information is not fully d...

9.8CVSS9.5AI score0.0076EPSS
Exploits1References1Affected Software1
Positive Technologies
Positive Technologies
added 2023/03/06 12:0 a.m.2 views

PT-2023-20866 · Unknown · Onekeyadmin

Name of the Vulnerable Software and Affected Versions: onekeyadmin version 1.3.9 Description: The issue is related to an arbitrary file upload vulnerability in the /admin1/config/update component, allowing attackers to execute arbitrary code via a crafted PHP file. Recommendations: For onekeyadmi...

9.8CVSS9.5AI score0.0076EPSS
Exploits1References3
Cvelist
Cvelist
added 2023/03/06 12:0 a.m.11 views

CVE-2023-26949

An arbitrary file upload vulnerability in the component /admin1/config/update of onekeyadmin v1.3.9 allows attackers to execute arbitrary code via a crafted PHP file...

9.8AI score0.0076EPSS
Exploits1References1
Rows per page
Query Builder