CVE-2024-7706

CVE-2024-7706 affects Fujian mwcms 1.0.0; the uploadimage function in /uploadfile.html is vulnerable due to unrestricted upload via the upfile parameter. This enables remote exploitation and has had the exploit publicly disclosed. Vendor response is not provided in the documents. A mitigations pa...

CVE-2024-7705

CVE-2024-7705 affects Fujian mwcms 1.0.0, specifically the Image Upload component’s function uploadeditor at /uploadeditor.html?action=uploadimage. The vulnerability arises from manipulating the upfile parameter, enabling unrestricted file upload and remote exploitation. Public exploitation infor...