Lucene search
K

8 matches found

OSV
OSV
added 2023/06/02 11:15 a.m.2 views

CVE-2023-28699

Wade Graphic Design FANTSY has a vulnerability of insufficient filtering for file type in its file update function. An authenticated remote attacker with general user privilege can exploit this vulnerability to upload a PHP file containing a webshell to perform arbitrary system operation or disru...

8.8CVSS7.4AI score0.00292EPSS
Exploits0References1
NVD
NVD
added 2023/06/02 11:15 a.m.6 views

CVE-2023-28698

Wade Graphic Design FANTSY has a vulnerability of insufficient authorization check. An unauthenticated remote user can exploit this vulnerability by modifying URL parameters to gain administrator privileges to perform arbitrary system operation or disrupt service...

9.8CVSS9.8AI score0.00389EPSS
Exploits0References1
Prion
Prion
added 2023/06/02 11:15 a.m.14 views

Privilege escalation

Wade Graphic Design FANTSY has a vulnerability of insufficient filtering for file type in its file update function. An authenticated remote attacker with general user privilege can exploit this vulnerability to upload a PHP file containing a webshell to perform arbitrary system operation or disru...

6.5CVSS8.7AI score0.00292EPSS
Exploits0References1Affected Software1
CNNVD
CNNVD
added 2023/06/02 12:0 a.m.2 views

Wade Graphic Design FANTSY 安全漏洞

Wade Graphic Design FANTSY is a digital art application from Wade Graphic Design. A security vulnerability exists in Wade Graphic Design FANTSY version v2.1.8, which originates from an insufficient authorization checking vulnerability that allows a remote, unauthenticated user to gain administrat...

9.8CVSS8.6AI score0.00389EPSS
Exploits0References3
Cvelist
Cvelist
added 2023/06/02 12:0 a.m.9 views

CVE-2023-28698 WADE DIGITAL DESIGN CO, LTD. FANTSY - Broken Acesss Control

Wade Graphic Design FANTSY has a vulnerability of insufficient authorization check. An unauthenticated remote user can exploit this vulnerability by modifying URL parameters to gain administrator privileges to perform arbitrary system operation or disrupt service...

9.8CVSS9.9AI score0.00389EPSS
Exploits0References1
Cvelist
Cvelist
added 2023/06/02 12:0 a.m.11 views

CVE-2023-28699 WADE DIGITAL DESIGN CO, LTD. FANTSY - Arbitrary File Upload

Wade Graphic Design FANTSY has a vulnerability of insufficient filtering for file type in its file update function. An authenticated remote attacker with general user privilege can exploit this vulnerability to upload a PHP file containing a webshell to perform arbitrary system operation or disru...

8.8CVSS8.9AI score0.00292EPSS
Exploits0References1
CVE
CVE
added 2023/06/02 12:0 a.m.43 views

CVE-2023-28699

CVE-2023-28699 affects Wade Graphic Design FANTSY. The vulnerability is insufficient filtering for file type in the file update function, enabling an authenticated remote user with general privileges to upload a PHP file containing a webshell and perform arbitrary system operations or disrupt ser...

8.8CVSS8.8AI score0.00292EPSS
Exploits0References1Affected Software1
CNNVD
CNNVD
added 2023/06/02 12:0 a.m.3 views

Wade Graphic Design FANTSY 代码问题漏洞

Wade Graphic Design FANTSY is a digital art application from Wade Graphic Design. A code issue vulnerability exists in Wade Graphic Design FANTSY v2.1.8, which stems from an insufficient file type filtering vulnerability that can be exploited by an authenticated, remote attacker with normal user...

8.8CVSS8.2AI score0.00292EPSS
Exploits0References2
Rows per page
Query Builder