CVE-2023-1970CWE-434

yuan1994 tpAdmin Upload.php Upload unrestricted upload

Medium · published April 10, 2023

CVSS v3.1
6.3
EPSS
1%
Percentile
62.9
In the wild
Unconfirmed
What it is

** UNSUPPORTED WHEN ASSIGNED ** A vulnerability, which was classified as problematic, has been found in yuan1994 tpAdmin 1.3.12. This issue affects the function Upload of the file application\admin\controller\Upload.php. The manipulation of the argument file leads to unrestricted upload. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-225407. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.

The record
Technical detail
CVSS v3.1
6.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.01013 · 62.9th percentile
Weakness
CWE-434 · Unrestricted Upload of File with Dangerous Type
Published
2023-04-10T16:00Z
EPSS history
Timeline
  • 10 APR 16:00Z
    yuan1994 tpAdmin Upload.php Upload unrestricted upload
    cvelistv5