A vulnerability has been found in Zorlan SkyCaiji 2.9 and classified as critical. This vulnerability affects the function fileAction of the file vendor/skycaiji/app/admin/controller/Tool.php. The manipulation of the argument save_data leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.
The product allows the upload or transfer of dangerous file types that are automatically processed within its environment.
| Link | Tags |
|---|---|
| https://vuldb.com/?id.298012 | vdb entry technical description third party advisory |
| https://vuldb.com/?ctiid.298012 | vdb entry permissions required signature |
| https://vuldb.com/?submit.502648 | vdb entry third party advisory |
| https://github.com/sheratan4/cve/issues/5 | exploit broken link issue tracking |