Products
nukeviet
- 4.5 and before
nukeviet-egov
- 1.2.02 and before
nukeviet
- 4.5
- before 4.5
nukeviet-egov
- 1.2.02
- before 1.2.02
Source
cve@mitre.org
Tags
CVE-2024-36528 details
Published : June 10, 2024, 3:15 p.m.
Last Modified : June 10, 2024, 6:06 p.m.
Last Modified : June 10, 2024, 6:06 p.m.
Description
nukeviet v.4.5 and before and nukeviet-egov v.1.2.02 and before have a Deserialization vulnerability which results in code execution via /admin/extensions/download.php and /admin/extensions/upload.php.
CVSS Score
1 | 2 | 3 | 4 | 5 | 6 | 7 | 8 | 9 | 10 |
---|
Weakness
Weakness | Name | Description |
---|
References
URL | Source |
---|---|
https://mat4mee.notion.site/2-bug-chains-in-nukeViet-lead-to-RCE-bdd42b20b05a448fbe87c752b41bb15f | cve@mitre.org |
This website uses the NVD API, but is not approved or certified by it.