Skip to content

Instantly share code, notes, and snippets.

@capable-Hub
Created February 18, 2024 07:11
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save capable-Hub/725c294f1aeac729fa314a32fef55d5a to your computer and use it in GitHub Desktop.
Save capable-Hub/725c294f1aeac729fa314a32fef55d5a to your computer and use it in GitHub Desktop.
[CVE ID]
CVE-2024-25274
[PRODUCT]
Novel-Plus - Novel-Plus 4.3.0-RC1
[VulnerabilityType Other]
Upload any file
[DESCRIPTION]
An arbitrary file upload vulnerability exists in common/sysFile/upload of Novel-Plus - Novel-Plus 4.3.0-RC1, which allows attackers to upload arbitrary malicious files and take control of the server
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment