CVE-2022-43234

An arbitrary file upload vulnerability in the /attachments component of Hoosk v1.8 allows attackers to execute arbitrary code via a crafted PHP file...

CVE-2022-43234

CVE-2022-43234 affects Hoosk v1.8, with an arbitrary file upload vulnerability in the "/attachments" component that allows remote code execution via a crafted PHP file. The root cause is insufficient validation of uploaded files, enabling an attacker to upload and execute arbitrary code. Multiple...