The vulnerability in the compress-inc.php script of the application for uploading and downloading files for shared use with Openupload allows a perpetrator to execute arbitrary code.

The vulnerability of the compress-inc.php script used for downloading and saving files for shared use with Openupload is related to the unlimited download of dangerous types of files when the action parameter with a value of compress=0 is processed. Exploiting this vulnerability could allow an...

CVE-2023-36319

File Upload vulnerability in Openupload Stable v.0.4.3 allows a remote attacker to execute arbitrary code via the action parameter of the compress-inc.php file...

Unrestricted file upload

File Upload vulnerability in Openupload Stable v.0.4.3 allows a remote attacker to execute arbitrary code via the action parameter of the compress-inc.php file...

CVE-2023-36319

File Upload vulnerability in Openupload Stable v.0.4.3 allows a remote attacker to execute arbitrary code via the action parameter of the compress-inc.php file...