Lucene search
K

5 matches found

OSV
OSV
added 2026/01/19 12:15 p.m.1 views

CVE-2026-1152

A security vulnerability has been detected in technical-laohu mpay up to 1.2.4. The impacted element is an unknown function of the component QR Code Image Handler. Such manipulation of the argument codeimg leads to unrestricted upload. The attack may be launched remotely. The exploit has been...

9.8CVSS5.4AI score
Exploits0References4
NVD
NVD
added 2026/01/19 12:15 p.m.3 views

CVE-2026-1152

A security vulnerability has been detected in technical-laohu mpay up to 1.2.4. The impacted element is an unknown function of the component QR Code Image Handler. Such manipulation of the argument codeimg leads to unrestricted upload. The attack may be launched remotely. The exploit has been...

9.8CVSS0.00074EPSS
Exploits1References4
Vulnrichment
Vulnrichment
added 2026/01/19 11:32 a.m.6 views

CVE-2026-1152 technical-laohu mpay QR Code Image unrestricted upload

A security vulnerability has been detected in technical-laohu mpay up to 1.2.4. The impacted element is an unknown function of the component QR Code Image Handler. Such manipulation of the argument codeimg leads to unrestricted upload. The attack may be launched remotely. The exploit has been...

5.8CVSS5.3AI score0.00074EPSS
Exploits1References4
CVE
CVE
added 2026/01/19 11:32 a.m.5 views

CVE-2026-1152

The affected software is technical-laohu mpay (versions up to 1.2.4). A vulnerability in the QR Code Image Handler allows manipulation of the codeimg argument that leads to unrestricted file upload. This can be exploited remotely, and public exploits have been disclosed. Remediation per PSIRT/PT ...

9.8CVSS5.3AI score0.00074EPSS
Exploits1References4Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/01/19 11:32 a.m.5 views

CVE-2026-1152

A security vulnerability has been detected in technical-laohu mpay up to 1.2.4. The impacted element is an unknown function of the component QR Code Image Handler. Such manipulation of the argument codeimg leads to unrestricted upload. The attack may be launched remotely. The exploit has been...

9.8CVSS5.1AI score0.00074EPSS
Exploits1References4Affected Software1
Rows per page
Query Builder