Vulnerability — CVE-2023-49444

CVE-2023-49444

Reference to the description:: https://nvd.nist.gov/vuln/detail/CVE-2023-49444
Description:: An arbitrary file upload vulnerability in DoraCMS v2.1.8 allow attackers to execute arbitrary code via uploading a crafted HTML or image file to the user avatar.
Last updated date:: 12/11/2023

Type:: exploit
Confidence:: HIGH
Date of publishing:: 12/11/2023
Reference url to background: https://github.com/woshinibaba222/DoraCMS-File-Upload-Vulnerability