Vendor
Volmarg
3 known vulnerabilities.
Products
2 results · Clear filters · Feed
-
High 7.2
Volmarg Personal Management System through 2.1.0 Unrestricted File Upload RCE via /upload/send/
Volmarg Personal Management System through 2.1.0 contains an unrestricted file upload vulnerability that allows authenticated users to upload PHP files via the /upload/send/ endpoint. Attackers can submit base64 fileContent with a .php fileName into the web r…
-
High 7.2
Volmarg Personal Management System through 2.1.0 OS Command Injection via Storage Folder Path
Volmarg Personal Management System through 2.1.0 contains an OS command injection vulnerability that allows authenticated users to execute shell commands via unescaped folder paths in the storage module's tree command. Attackers can create a directory under u…