Skip to content
OpenAdvisories

Vendor

HFO4

2 known vulnerabilities.

Products

2 results · Clear filters · Feed

  • Medium 6.3

    HFO4 shudong-share Share create_share.php sql injection

    A vulnerability classified as critical has been found in HFO4 shudong-share up to 2.4.7. This affects an unknown part of the file /includes/create_share.php of the component Share Handler. The manipulation of the argument fkey leads to sql injection. It is po…

  • Medium 6.3

    HFO4 shudong-share File Extension fileReceive.php unrestricted upload

    A vulnerability was found in HFO4 shudong-share 2.4.7. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /includes/fileReceive.php of the component File Extension Handler. The manipulation of the argument…