Vulnerabilities

TI-2024-24300 CVE-2024-36531 · GHSA-grwc-qr6v-mgmv

nukeviet v.4.5 and before and nukeviet-egov v.1.2.02 and before are vulnerable to…

MEDIUM 61

nukeviet v.4.5 and before and nukeviet-egov v.1.2.02 and before are vulnerable to arbitrary code execution via the /admin/extensions/upload.php component.

CVSS 3.1MEDIUM 5.7 Network High privileges User interaction EPSS 0.00433 Published 2024-06-10 No fix listed CWE-94

TI-2024-24299 CVE-2024-36528 · GHSA-mhj4-vrcv-x4xc

nukeviet v.4.5 and before and nukeviet-egov v.1.2.02 and before have a Deserialization…

HIGH 73

nukeviet v.4.5 and before and nukeviet-egov v.1.2.02 and before have a Deserialization vulnerability which results in code execution via /admin/extensions/download.php and /admin/extensions/upload.php.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00845 Published 2024-06-10 No fix listed CWE-502

Vulnerabilities

Filters

nukeviet v.4.5 and before and nukeviet-egov v.1.2.02 and before are vulnerable to…

nukeviet v.4.5 and before and nukeviet-egov v.1.2.02 and before have a Deserialization…