CVE-2024-55372

Wallos =2.38.2 has a file upload vulnerability in the restore database function, which allows unauthenticated users to restore database by uploading a ZIP file. The contents of the ZIP file are extracted on the server. This functionality enables an unauthenticated attacker to upload malicious fil...

Resistant product image management system Access version of Cookie spoofing vulnerability-vulnerability warning-the black bar safety net

About a year ago I discovered the resistance to the product image management system Access version of a Cookie spoofing vulnerability: any user can modify the Cookie to get administrator privileges. This year 6 month, I give resistance to product technology sent a message to inform this...