Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

CVE-2021-34257

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-vhgr-gfx3-fg37

Unrestricted Upload of File with Dangerous Type in WPanel 4 Multiple Remote Code Execution (RCE) vulnerabilities exist in WPanel 4 4.3.1 and below via a malicious PHP file upload to (1) Dashboard's Avatar image, (2) Posts Folder image, (3) Pages Folder image and (4) Gallery Folder image.

gitlab/packagist/wpanel/wpanel4-cms/CVE-2021-34257

Unrestricted Upload of File with Dangerous Type Multiple Remote Code Execution (RCE) vulnerabilities exist in WPanel 4 4.3.1 and below via a malicious PHP file upload to (1) Dashboard's Avatar image, (2) Posts Folder image, (3) Pages Folder image and (4) Gallery Folder image.