CVE-2023-1442 Meizhou Qingyunke QYKCMS Update api.php unrestricted upload

A vulnerability was found in Meizhou Qingyunke QYKCMS 4.3.0. It has been classified as problematic. This affects an unknown part of the file /adminsystem/api.php of the component Update Handler. The manipulation of the argument downurl leads to unrestricted upload. It is possible to initiate the...

CVE-2023-1442

CVE-2023-1442 affects Meizhou Qingyunke QYKCMS 4.3.0, specifically the Update Handler’s /admin_system/api.php and the downurl parameter, which enables unrestricted file upload. The vulnerability allows remote initiation and has public exploits disclosed. According to sources, the issue stems from...