medium6.5
CVE-2023-42248
An issue was discovered in Selesta Visual Access Manager (VAM) prior to 4.42.2.
Impact
An issue was discovered in Selesta Visual Access Manager (VAM) prior to 4.42.2. An authenticated attacker can write arbitrary files by manipulating POST parameters of the page "common/vam_Sql.php".
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Seling | Visual Access Manager | before 4.42.2 |