Skip to content
OpenAdvisories

Vendor

CuteFlow.org

1 known vulnerabilities.

Products

1 result · Clear filters · Feed

  • Critical 9.3
    CVE-2012-10050 Public exploit

    CuteFlow <= 2.11.2 Arbitrary File Upload RCE

    CuteFlow version 2.11.2 and earlier contains an arbitrary file upload vulnerability in the restart_circulation_values_write.php script. The application fails to validate or restrict uploaded file types, allowing unauthenticated attackers to upload arbitrary P…