VYPR

Mirage

by DeepMountains

CVEs (2)

  • CVE-2024-7742HigAug 13, 2024
    risk 0.48cvss 7.3epss 0.01

    A vulnerability was found in wanglongcn ltcms 1.0.20. It has been classified as critical. Affected is the function multiDownload of the file /api/file/multiDownload of the component API Endpoint. The manipulation of the argument file leads to server-side request forgery. It is…

  • CVE-2024-7906MedAug 18, 2024
    risk 0.41cvss 6.3epss 0.00

    A vulnerability classified as critical was found in DedeBIZ 6.3.0. This vulnerability affects the function get_mime_type of the file /admin/dialog/select_images_post.php of the component Attachment Settings. The manipulation of the argument upload leads to unrestricted upload.…