Skip to content
OpenAdvisories

Vendor

Tad

9 known vulnerabilities.

Products

TadTools 3 Uploader 2 Tad Book3 2 Tad Web 1 Tad Honor 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.1
    CVE-2021-41974

    Tad Book3 - Improper Authorization

    Tad Book3 editing book page does not perform identity verification. Remote attackers can use the vulnerability to view and modify arbitrary content of books without permission.

    Tad Tad Book3
  • Critical 9.8
    CVE-2021-41566

    Tad TadTools - Arbitrary File Upload

    The file extension of the TadTools file upload function fails to filter, thus remote attackers can upload any types of files and execute arbitrary code without logging in.

    Tad TadTools