CVE-2023-28699 — WADE DIGITAL DESIGN CO, LTD. FANTSY - Arbitrary File Upload
Wade Graphic Design FANTSY has a vulnerability of insufficient filtering for file type in its file update function. An authenticated remote attacker with general user privilege …
Published: 2023-06-02 · CVSS: 8.8 · CVSS 3.1
Wade Graphic Design FANTSY has a vulnerability of insufficient filtering for file type in its file update function. An authenticated remote attacker with general user privilege can exploit this vulnerability to upload a PHP file containing a webshell to perform arbitrary system operation or disrupt service.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7