Lucene search
Veracode Vulnerability DatabaseVERACODE:40151HistoryApr 18, 2023 - 9:32 a.m.
Arbitrary File Upload
2023-04-1809:32:01
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
10
arbitrary file upload
validation bypass
server privilege
0.002 Low
EPSS
Percentile
52.0%
yuan1994/tpadmin is vulnerable to Arbitrary File Upload. The vulnerability exists because the library does not properly validate files uploaded in Upload.php, allowing an attacker to bypass the file upload restrictions and take over server privilege.
| CPE | Name | Operator | Version |
|---|---|---|---|
| yuan1994/tpadmin | le | v1.3.12 | |
| yuan1994/tpadmin | le | v1.3.12 |
Related
prion
prion
Out-of-bounds
2023-04-10 16:15:00
cvelist
cvelist
CVE-2023-1970 yuan1994 tpAdmin Upload.php Upload unrestricted upload
2023-04-10 16:00:06
cve
cve
CVE-2023-1970
2023-04-10 16:15:07
osv
osv
nvd
nvd
CVE-2023-1970
2023-04-10 16:15:07
github
github