CVE-2024-36531

CVE-2024-36531 affects nukeviet v4.5 and earlier and nukeviet-egov v1.2.02 and earlier. The vulnerability is described as arbitrary code execution via the /admin/extensions/upload.php component, due to improper validation in that upload handler. Impact and exploitability are supported by multiple...

CVE-2024-36531

nukeviet v.4.5 and before and nukeviet-egov v.1.2.02 and before are vulnerable to arbitrary code execution via the /admin/extensions/upload.php component...