Skip to content
OpenAdvisories

Vendor

Yue Lao

1 known vulnerabilities.

Products

Blind Box 月老盲盒 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.3
    CVE-2025-2671

    Yue Lao Blind Box 月老盲盒 Upload.php base64image unrestricted upload

    A vulnerability was found in Yue Lao Blind Box 月老盲盒 up to 4.0. It has been declared as critical. This vulnerability affects the function base64image of the file /app/controller/Upload.php. The manipulation of the argument data leads to unrestricted upload. Th…

    Yue Lao Blind Box 月老盲盒