CVE-2024-36531

nukeviet v.4.5 and before and nukeviet-egov v.1.2.02 and before are vulnerable to arbitrary code execution via the /admin/extensions/upload.php component...

CVE-2024-36531

The nukeviet content management system (CMS) and nukeviet-egov are vulnerable to arbitrary code execution due to improper validation in the /admin/extensions/upload.php component. This flaw allows an attacker to execute arbitrary code on the server. Affected software includes nukeviet v.4.5 and b...