Skip to content
OpenAdvisories

Vendor

Havalite CMS

1 known vulnerabilities.

Products

1 result · Clear filters · Feed

  • Critical 9.3
    CVE-2013-10055 Public exploit

    Havalite CMS Arbitary File Upload RCE

    An unauthenticated arbitrary file upload vulnerability exists in Havalite CMS version 1.1.7 (and possibly earlier) in the upload.php script. The application fails to enforce proper file extension validation and authentication checks, allowing remote attackers…