EUVD-2026-109605

A security flaw has been discovered in GouGuOA up to 6.1.2. The impacted element is the function chunkUpload of the file app/disk/controller/Api.php. The manipulation of the argument fileextension results in unrestricted upload. It is possible to launch the attack remotely. The exploit has been...