Arbitrary Code Execution

badaso/core is vulnerable to Arbitrary Code Execution ACE. The vulnerability is due to improper content-type validation in the Media Manager file-upload endpoint, which allows an attacker to upload PHP files disguised as other formats and execute arbitrary system commands, leading to full host...

Arbitrary File Upload

Overview badaso/core is an API and platform builder Affected versions of this package are vulnerable to Arbitrary File Upload via the file-upload process. An attacker can execute arbitrary code on the server by uploading a file containing embedded PHP code, bypassing content-type validation, and...

Arbitrary Code Execution

badaso/core is vulnerable to arbitrary code executions. The vulnerability is due to the application not properly validating the data uploaded by users which allows an attacker to perform arbitrary code execution...