Newbee-mall code issue vulnerability

newbee-mall is an e-commerce system. newbee-mall v1.0.0 has a security vulnerability that can be exploited by attackers to upload arbitrary files via the upload function of /admin/goods/edit...

CVE-2022-27477

Newbee-Mall v1.0.0 was discovered to contain an arbitrary file upload via the Upload function at /admin/goods/edit...

CVE-2022-27477

Newbee-Mall v1.0.0 was discovered to contain an arbitrary file upload via the Upload function at /admin/goods/edit...

CVE-2022-27477

Newbee-Mall v1.0.0 was discovered to contain an arbitrary file upload via the Upload function at /admin/goods/edit...

CVE-2022-27477

Newbee-Mall v1.0.0 was discovered to contain an arbitrary file upload via the Upload function at /admin/goods/edit...

PT-2022-18446

Name of the Vulnerable Software and Affected Versions Newbee-Mall version 1.0.0 Description The issue allows for arbitrary file upload via the Upload function at the "/admin/goods/edit" API endpoint. Recommendations For Newbee-Mall version 1.0.0, consider disabling the Upload function at the...

CVE-2022-27477: Unrestricted Upload of File with Dangerous Type

Newbee-Mall v1.0.0 was discovered to contain an arbitrary file upload via the Upload function at /admin/goods/edit...