Skip to content
OpenAdvisories

Product · z-9527

admin

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.3
    CVE-2026-5251

    z-9527 admin User Update Endpoint user.js dynamically-determined object attributes

    A vulnerability was identified in z-9527 admin 1.0/2.0. This impacts an unknown function of the file /server/routes/user.js of the component User Update Endpoint. Such manipulation of the argument isAdmin with the input 1 leads to dynamically-determined objec…

    z-9527 admin
  • Medium 6.3
    CVE-2026-4999

    z-9527 admin isImg Check upload.js uploadFile path traversal

    A security vulnerability has been detected in z-9527 admin up to 72aaf2dd05cf4ec2e98f390668b41e128eec5ad2. This issue affects the function uploadFile of the file /server/utils/upload.js of the component isImg Check. The manipulation of the argument fileType l…

    z-9527 admin