6 matches found
CVE-2024-1259 Juanpao JPShop API AppController.php unrestricted upload
A vulnerability was found in Juanpao JPShop up to 1.5.02. It has been rated as critical. Affected by this issue is some unknown functionality of the file /api/controllers/admin/app/AppController.php of the component API. The manipulation of the argument apppicurl leads to unrestricted upload. The...
CVE-2024-1259: Unrestricted Upload of File with Dangerous Type
A vulnerability was found in Juanpao JPShop up to 1.5.02. It has been rated as critical. Affected by this issue is some unknown functionality of the file /api/controllers/admin/app/AppController.php of the component API. The manipulation of the argument apppicurl leads to unrestricted upload. The...
CVE-2023-48659: Undefined Security Weakness
An issue was discovered in MISP before 2.4.176. app/Controller/AppController.php mishandles parameter parsing...
CVE-2023-48659
An issue was discovered in MISP before 2.4.176. app/Controller/AppController.php mishandles parameter parsing...
Privilege Escalation
facturascripts/facturascripts is vulnerable to privilege escalation. The vulnerability exists in the newUserPassword function in AppController.php due to a lack of validation in the password field which allows an unauthorized user to access the user account...
