CVE-2023-26949

An arbitrary file upload vulnerability in the component /admin1/config/update of onekeyadmin v1.3.9 allows attackers to execute arbitrary code via a crafted PHP file...

PT-2023-20866 · Unknown · Onekeyadmin

Name of the Vulnerable Software and Affected Versions: onekeyadmin version 1.3.9 Description: The issue is related to an arbitrary file upload vulnerability in the /admin1/config/update component, allowing attackers to execute arbitrary code via a crafted PHP file. Recommendations: For onekeyadmi...