critical9.8
CVE-2023-26949
An arbitrary file upload vulnerability in the component /admin1/config/update of onekeyadmin v1.3.9 allows attackers to execute arbitrary code via a crafted PH…
Impact
An arbitrary file upload vulnerability in the component /admin1/config/update of onekeyadmin v1.3.9 allows attackers to execute arbitrary code via a crafted PHP file.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Onekeyadmin | Onekeyadmin | Version 1.3.9 |