CVE-2023-1684

HadSky 7.7.16 is affected by an unrestricted upload vulnerability in the file path upload/index.php?c=app&a=superadmin:index. The issue, exploitable remotely and publicly disclosed, is caused by a flaw in the upload handling that allows arbitrary files to be uploaded. Public sources in connected ...