CVE-2023-26857

An arbitrary file upload vulnerability in /admin/ajax.php?action=saveuploads of Dynamic Transaction Queuing System v1.0 allows attackers to execute arbitrary code via a crafted PHP file...

CVE-2023-26857

CVE-2023-26857 affects Dynamic Transaction Queuing System v1.0, with an arbitrary file upload vulnerability in /admin/ajax.php?action=save_uploads that enables remote code execution via a crafted PHP file. The CVSS v3.1 vector indicates NETWORK attack, LOW complexity, PRIVILEGES REQUIRED: HIGH, n...