A file upload vulnerability in java_shop 1.0 allows attackers to upload arbitrary files by modifying the avatar function.

Published Nov 15, 2024 · Updated Nov 21, 2024 · Assigned by mitre