3 matches found
CVE-2013-10066: Unrestricted Upload of File with Dangerous Type
An unauthenticated arbitrary file upload vulnerability exists in Kordil EDMS v2.2.60rc3. The application exposes an upload endpoint usersadd.php that allows attackers to upload files to the /userpictures/ directory without authentication. This flaw enables remote code execution by uploading a PHP...
10CVSS6.4AI score0.01654EPSS
SaveExploits1References1
CVE-2022-41539: Unrestricted Upload of File with Dangerous Type
Wedding Planner v1.0 was discovered to contain an arbitrary file upload vulnerability in the component /admin/usersadd.php. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file...
8.8CVSS8.2AI score0.01158EPSS
SaveExploits1References3
20