critical9.8
CVE-2023-27397
Unrestricted upload of file with dangerous type exists in MicroEngine Mailform version 1.1.0 to 1.1.8.
Impact
Unrestricted upload of file with dangerous type exists in MicroEngine Mailform version 1.1.0 to 1.1.8. If the product's file upload function and server save option are enabled, a remote attacker may save an arbitrary file on the server and execute it.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Microengine | Mailform | from 1.1.0 before 1.1.9 |