Skip to content
OpenAdvisories

Vendor

Pachno

6 known vulnerabilities.

Products

Pachno 6
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.8
    CVE-2026-40040

    Pachno 1.0.6 Unrestricted File Upload Remote Code Execution

    Pachno 1.0.6 contains an unrestricted file upload vulnerability that allows authenticated users to upload arbitrary file types by bypassing ineffective extension filtering to the /uploadfile endpoint. Attackers can upload executable files .php5 scripts to web…

    Pachno Pachno
  • High 7.2
    CVE-2026-40038

    Pachno 1.0.6 Stored Cross-Site Scripting via Multiple Parameters

    Pachno 1.0.6 contains a stored cross-site scripting vulnerability that allows attackers to execute arbitrary HTML and script code by injecting malicious payloads into POST parameters. Attackers can inject scripts through the value, comment_body, article_conte…

    Pachno Pachno