Vendor
HFO4
2 known vulnerabilities.
Products
2 results · Clear filters · Feed
-
Medium 6.3
HFO4 shudong-share Share create_share.php sql injection
A vulnerability classified as critical has been found in HFO4 shudong-share up to 2.4.7. This affects an unknown part of the file /includes/create_share.php of the component Share Handler. The manipulation of the argument fkey leads to sql injection. It is po…
-
Medium 6.3
HFO4 shudong-share File Extension fileReceive.php unrestricted upload
A vulnerability was found in HFO4 shudong-share 2.4.7. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /includes/fileReceive.php of the component File Extension Handler. The manipulation of the argument…