PT-2023-25420 · Smanga · Smanga

Name of the Vulnerable Software and Affected Versions: smanga versions 3.1.9 and earlier Description: The issue allows remote attackers to execute arbitrary code and gain sensitive information. This is achieved via the mediaId, mangaId, and userId parameters in the "php/history/add.php" endpoint...