medium4.9
CVE-2024-9923
The Team+ from TEAMPLUS TECHNOLOGY does not properly validate a specific page parameter, allowing remote attackers with administrator privileges to move arbitr…
Impact
The Team+ from TEAMPLUS TECHNOLOGY does not properly validate a specific page parameter, allowing remote attackers with administrator privileges to move arbitrary system files to the website root directory and access them.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Teamplus | Team\+ Pro | from 13.5.0 before 14.0.0 |