VYPR

Quicklert

by Digium

CVEs (1)

  • CVE-2021-43970HigMar 10, 2022
    risk 0.57cvss 8.8epss 0.02

    An arbitrary file upload vulnerability exists in albumimages.jsp in Quicklert for Digium 10.0.0 (1043) via a .mp3;.jsp filename for a file that begins with audio data bytes. It allows an authenticated (low privileged) attacker to execute remote code on the target server within…