CVE-2026-71620

File Upload vulnerability in Zhao-github ApiAdmin v.5.0.1 allows a remote attacker to execute arbitrary code via a crafted .php file...

CVE-2026-71620

A File Upload vulnerability exists in Zhao-github ApiAdmin v.5.0.1 , allowing a remote attacker to execute arbitrary code . The root cause is the ability to upload a crafted .php file to the system. The provided documents do not specify a remediation or a direct link to a functional exploit.

CVE-2026-71620: Unrestricted Upload of File with Dangerous Type

File Upload vulnerability in Zhao-github ApiAdmin v.5.0.1 allows a remote attacker to execute arbitrary code via a crafted .php file...

PT-2026-86237

Name of the Vulnerable Software and Affected Versions ApiAdmin version 5.0.1 Description A file upload flaw allows a remote attacker to execute arbitrary code by uploading a specially crafted .php file. Recommendations At the moment, there is no information about a newer version that contains a f...

CVE-2026-71620

File Upload vulnerability in Zhao-github ApiAdmin v.5.0.1 allows a remote attacker to execute arbitrary code via a crafted .php file...

CVE-2026-71622

A SQL injection vulnerability exists in Zhao-github APiAdmin v.5.0.1 . This flaw allows a remote attacker to obtain sensitive information by exploiting the User.php component. No specific remediation or exploit details are provided in the documents.

CVE-2026-71622: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in Zhao-github APiAdmin v.5.0.1 allows a remote attacker to obtain sensitive information via the User.php component...