CVE-2023-2245

A vulnerability was found in hansunCMS 1.4.3. It has been declared as critical. This vulnerability affects unknown code of the file /ueditor/net/controller.ashx?action=catchimage. The manipulation leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed t...

PT-2024-38277 · Baidu · Baidu Ueditor

Name of the Vulnerable Software and Affected Versions: Baidu UEditor version 1.4.2 Description: A vulnerability was found in the file /ueditor142/php/controller.php?action=catchimage, where the manipulation of the argument source leads to cross site scripting. The attack can be initiated remotely...

PT-2023-18506 · Hansuncms · Hansuncms

Name of the Vulnerable Software and Affected Versions: hansunCMS version 1.4.3 Description: A critical issue affects the /ueditor/net/controller.ashx?action=catchimage file, leading to unrestricted upload. The attack can be initiated remotely. The issue has been publicly disclosed and may be...