| Package | Affected versions | Patched versions |
|---|---|---|
| kusaba | ≤ 1.0.4 |
Multiple unrestricted file upload vulnerabilities in Kusaba 1.0.4 and earlier allow remote authenticated users to execute arbitrary code by uploading a file with an executable extension using (1) load_receiver.php or (2) a shipainter action to paint_save.php, then accessing the uploaded file via a direct request to this file in their user directory.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free