CVE-2022-27478: Unrestricted Upload of File with Dangerous Type

Victor v1.0 was discovered to contain a remote code execution RCE vulnerability via the component admin/profile.php?section=admin...

PT-2022-18447

Name of the Vulnerable Software and Affected Versions Victor version 1.0 Description The issue is related to a remote code execution RCE vulnerability. It can be exploited via the admin/profile.php?section=admin endpoint. Recommendations For Victor version 1.0, consider restricting access to the...