Vendor
Kordil
1 known vulnerabilities.
Products
1 result · Clear filters · Feed
-
Critical 10.0CVE-2013-10066 Public exploit
Kordil EDMS v2.2.60rc3 Unauthenticated Arbitrary File Upload
An unauthenticated arbitrary file upload vulnerability exists in Kordil EDMS v2.2.60rc3. The application exposes an upload endpoint (users_add.php) that allows attackers to upload files to the /userpictures/ directory without authentication. This flaw enables…