Skip to content
OpenAdvisories

Vendor

2-Plan

1 known vulnerabilities.

Products

Plan Team 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.5
    CVE-2018-25162

    2-Plan Team 1.0.4 Arbitrary File Upload via managefile.php

    2-Plan Team 1.0.4 contains an arbitrary file upload vulnerability that allows authenticated attackers to upload executable PHP files by sending multipart form data to managefile.php. Attackers can upload PHP files through the userfile1 parameter with action=u…

    2-Plan Plan Team