CVE-2024-34909

An arbitrary file upload vulnerability in KYKMS v1.0.1 and below allows attackers to execute arbitrary code via uploading a crafted PDF file...

CVE-2024-34909

The KYKMS knowledge base management system, versions v1.0.1 and below , is vulnerable to an arbitrary file upload flaw. This vulnerability allows an attacker to execute arbitrary code by uploading a specially crafted PDF file . While some reports also associate the software with Cross-Site Script...