| |
Podatność CVE-2023-49444
Publikacja: 2023-12-08 Modyfikacja: 2023-12-14
| Opis: |
An arbitrary file upload vulnerability in DoraCMS v2.1.8 allow attackers to execute arbitrary code via uploading a crafted HTML or image file to the user avatar. |
Typ:
CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'))
Referencje: |
https://github.com/woshinibaba222/DoraCMS-File-Upload-Vulnerability
|
|
|
Copyright 2024, cxsecurity.com
|
|
|
Polish
English