Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Beauknowstech

#25954of 53,624
9.8Total CVSS
Vulnerabilities · 1
PT-2023-19069
9.8
2023-01-20
Erohtar · Dasherr · CVE-2023-23607
**Name of the Vulnerable Software and Affected Versions** erohtar/Dasherr versions prior to 1.05.00 **Description** The issue allows any unauthenticated user to execute arbitrary code on the server due to unrestricted file upload. The file /www/include/filesave.php enables uploading files to anywhere on the server. If an attacker uploads a php file, they can execute code on the server. **Recommendations** For versions prior to 1.05.00, upgrade to version 1.05.00 to address the issue. As a temporary workaround, consider restricting access to the /www/include/filesave.php file to prevent unauthorized file uploads. Additionally, avoid uploading php files to the server until the issue is resolved.