Lucene search
+L

5 matches found

NVD
NVD
added 2026/07/12 9:16 a.m.10 views

CVE-2026-15488

A vulnerability was determined in hcr707305003 shiroiAdmin 1.1/1.3. Affected is the function FileController::upload of the file app/common/controller/FileController.php. Executing a manipulation of the argument File can lead to unrestricted upload. The attack may be launched remotely. The exploit...

7.5CVSS0.00314EPSS
SaveExploits0References7
Cvelist
Cvelist
added 2026/07/12 8:45 a.m.33 views

CVE-2026-15488 hcr707305003 shiroiAdmin FileController.php upload unrestricted upload

A vulnerability was determined in hcr707305003 shiroiAdmin 1.1/1.3. Affected is the function FileController::upload of the file app/common/controller/FileController.php. Executing a manipulation of the argument File can lead to unrestricted upload. The attack may be launched remotely. The exploit...

7.5CVSS0.00314EPSS
SaveExploits0References7
CVE
CVE
added 2026/07/12 8:45 a.m.25 views

CVE-2026-15488

The CVE affects hcr707305003 shiroiAdmin versions 1.1/1.3 where FileController.php (FileController::upload) can be manipulated to trigger an unrestricted file upload. This could be exploited remotely. A public exploit exists. Upgrade to version 1.4 to address the issue (patch 3ecde28ea8a20a3840db...

7.5CVSS6.7AI score0.00314EPSS
SaveExploits0References7
ATTACKERKB
ATTACKERKB
added 2026/07/12 8:45 a.m.5 views

CVE-2026-15488

A vulnerability was determined in hcr707305003 shiroiAdmin 1.1/1.3. Affected is the function FileController::upload of the file app/common/controller/FileController.php. Executing a manipulation of the argument File can lead to unrestricted upload. The attack may be launched remotely. The exploit...

7.5CVSS6.7AI score0.00314EPSS
SaveExploits0References8Affected Software1
EUVD
EUVD
added 2026/07/12 8:45 a.m.10 views

EUVD-2026-43210

A vulnerability was determined in hcr707305003 shiroiAdmin 1.1/1.3. Affected is the function FileController::upload of the file app/common/controller/FileController.php. Executing a manipulation of the argument File can lead to unrestricted upload. The attack may be launched remotely. The exploit...

7.5CVSS6.7AI score0.00314EPSS
SaveExploits0References7
Rows per page
Query Builder