7 matches found
CVE-2023-31585
Grocery-CMS-PHP-Restful-API v1.3 is vulnerable to File Upload via /admin/add-category.php...
9.8CVSS6.9AI score0.00873EPSS
SaveExploits0References1
EUVD-2023-35882
Malicious code in bioql PyPI...
9.8CVSS6.6AI score0.00873EPSS
SaveExploits0References3
CVE-2023-31585
Grocery-CMS-PHP-Restful-API v1.3 is vulnerable to File Upload via /admin/add-category.php...
9.8CVSS0.00873EPSS
SaveExploits0References2
CVE-2023-31585
The Grocery-CMS-PHP-Restful-API v1.3 software is vulnerable to an Unrestricted Upload of File with Dangerous Type (CWE-434) via the /admin/add-category.php API endpoint. This flaw allows for the upload of potentially malicious files. To mitigate the risk, it is recommended to disable the file upl...
9.8CVSS7.1AI score0.00873EPSS
SaveExploits0References2
CVE-2023-31585
Grocery-CMS-PHP-Restful-API v1.3 is vulnerable to File Upload via /admin/add-category.php...
9.5AI score0.00873EPSS
SaveExploits0References2
20