Unscored CVE-2021-38697 EUVD-2021-25136GHSA-88pw-4rw2-v435

SoftVibe SARABAN for INFOMA 1.1 allows Unauthenticated unrestricted File Upload, that allows attackers to upload files with any file extens…

Published Jan 18, 2022 · Updated Aug 4, 2024 · Assigned by mitre

Description

SoftVibe SARABAN for INFOMA 1.1 allows Unauthenticated unrestricted File Upload, that allows attackers to upload files with any file extension which can lead to arbitrary code execution.

References

https://play.google.com/store/apps/details?id=th.co.softvibe.saraban&hl=en&gl=US
https://orangeo.tech/post/2021/12/24/First-CVEs.html
https://sawatdee.github.io/post/2021/12/24/First-CVEs.html
http://www.infoma.net/index.php/saraban/