CVE-2021-45834

An attacker can upload or transfer files of dangerous types to the OpenDocMan 1.4.4 portal via add.php using MIME-bypass, which may be automatically processed within the product's environment or lead to arbitrary code execution...

CVE-2021-45834

OpenDocMan 1.4.4 is affected by CVE-2021-45834 via add.php, where lack of file-upload restrictions enables MIME-bypass and may allow uploading or transferring dangerous file types. This could be automatically processed in the product environment and potentially lead to arbitrary code execution. R...