critical9.8
CVE-2021-38697
SoftVibe SARABAN for INFOMA 1.1 allows Unauthenticated unrestricted File Upload, that allows attackers to upload files with any file extension which can lead t…
Impact
SoftVibe SARABAN for INFOMA 1.1 allows Unauthenticated unrestricted File Upload, that allows attackers to upload files with any file extension which can lead to arbitrary code execution.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Softvibe | Saraban | Version 1.1 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.infoma.net/index.php/saraban/
- https://orangeo.tech/post/2021/12/24/First-CVEs.html
- https://play.google.com/store/apps/details?id=th.co.softvibe.saraban&hl=en&gl=US
- https://sawatdee.github.io/post/2021/12/24/First-CVEs.html
- http://www.infoma.net/index.php/saraban/
- https://orangeo.tech/post/2021/12/24/First-CVEs.html
- https://play.google.com/store/apps/details?id=th.co.softvibe.saraban&hl=en&gl=US
- https://sawatdee.github.io/post/2021/12/24/First-CVEs.html