En0Th

**Name of the Vulnerable Software and Affected Versions** nbnbk (affected versions not specified) **Description** The issue is related to an arbitrary file read vulnerability. This vulnerability is exploited via the `/api/Index/getFileBinary` API endpoint. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** nbnbk (affected versions not specified) **Description** A Cross-Site Request Forgery (CSRF) vulnerability in the Add Administrator function allows attackers to arbitrarily add Administrator accounts. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** nbnbk (affected versions not specified) **Description** The issue is related to an arbitrary file upload vulnerability. This vulnerability is exploited via the `/api/User/download img` API endpoint. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.