Skip to content
OpenAdvisories

Vendor

Kordil

1 known vulnerabilities.

Products

1 result · Clear filters · Feed

  • Critical 10.0
    CVE-2013-10066 Public exploit

    Kordil EDMS v2.2.60rc3 Unauthenticated Arbitrary File Upload

    An unauthenticated arbitrary file upload vulnerability exists in Kordil EDMS v2.2.60rc3. The application exposes an upload endpoint (users_add.php) that allows attackers to upload files to the /userpictures/ directory without authentication. This flaw enables…