Tadtools Security Vulnerabilities and Issues — Tadtools CVE List

Lucene search

Tadtools ProjectTadtools

2 matches found

CVE•added 2021/10/08 4:15 p.m.•29 views

CVE-2021-41566

The file extension of the TadTools file upload function fails to filter, thus remote attackers can upload any types of files and execute arbitrary code without logging in.

9.8CVSS9.9AI score0.02197EPSS

CVE•added 2021/10/08 4:15 p.m.•28 views

CVE-2021-41975

TadTools special page is vulnerable to authorization bypass, thus remote attackers can use the specific parameter to delete arbitrary files in the system without logging in.

9.1CVSS8.5AI score0.0044EPSS