EUVD-2021-13404

Malware in sbrugna...

CVE-2021-26610

The moveuploadedfile function in godomall5 does not perform an integrity check of extension or authority when user upload file. This vulnerability allows an attacker to execute an remote arbitrary code...

Design/Logic Flaw

The moveuploadedfile function in godomall5 does not perform an integrity check of extension or authority when user upload file. This vulnerability allows an attacker to execute an remote arbitrary code...

CVE-2021-26610 godomall5 remote code execution vulnerability

The moveuploadedfile function in godomall5 does not perform an integrity check of extension or authority when user upload file. This vulnerability allows an attacker to execute an remote arbitrary code...

CVE-2021-26610

The CVE-2021-26610 entry concerns NHN Commerce godomall5’s file upload routine, where move_uploaded_file does not perform an integrity check on file extension/authority. This omission can allow an attacker to upload malicious files, potentially leading to remote arbitrary code execution. Public s...

Nhn Commerce Godomall5 数据伪造问题漏洞

Nhn Commerce Godomall5 is a Nhn shopping solution from Nhn Commerce, a South Korean company. A data forgery vulnerability exists in Nhn Commerce godomall5, which stems from the fact that moveuploadedfile in the product does not validate the extension of files uploaded by users. The vulnerability...