Improper Access Control in liukuo362573/yishaadmin

Description https://www.github.com/liukuo362573/yishaadmin has an endpoint "/admin/File/UploadFile" that allows uploading files without authentication. Root-cause Server doesn't check user's permission when attacker access the endpoint. After that, server will directly call UploadFile function wi...

CVE-2019-14916

An issue was discovered in PRiSE adAS 1.7.0. A file's format is not properly checked, leading to an unrestricted file upload...

Unrestricted file upload

An issue was discovered in PRiSE adAS 1.7.0. A file's format is not properly checked, leading to an unrestricted file upload...

PT-2019-13864

Name of the Vulnerable Software and Affected Versions PRiSE adAS version 1.7.0 Description An issue was discovered where a file's format is not properly checked, leading to an unrestricted file upload. Recommendations For PRiSE adAS version 1.7.0, consider implementing proper file format validati...

CVE-2019-14916: Unrestricted Upload of File with Dangerous Type

An issue was discovered in PRiSE adAS 1.7.0. A file's format is not properly checked, leading to an unrestricted file upload...