medium5.7
CVE-2024-36531
nukeviet v.4.5 and before and nukeviet-egov v.1.2.02 and before are vulnerable to arbitrary code execution via the /admin/extensions/upload.php component.
Impact
nukeviet v.4.5 and before and nukeviet-egov v.1.2.02 and before are vulnerable to arbitrary code execution via the /admin/extensions/upload.php component.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Nukeviet | Egovernment | through 1.2.02 |
| Nukeviet | Nukeviet | through 4.5.05 |