Filtered by vendor Agevolt Subscriptions
Filtered by product Agevolt Subscriptions
Total 2 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2022-38484 1 Agevolt 1 Agevolt 2024-09-17 8.8 High
An arbitrary file upload and directory traversal vulnerability exist in the file upload functionality of the System Setup menu in AgeVolt Portal prior to version 0.1. A remote authenticated attacker could leverage this vulnerability to upload files to any location on the target operating system with web server privileges.
CVE-2022-38485 1 Agevolt 1 Agevolt 2024-09-17 6.5 Medium
A directory traversal vulnerability exists in the AgeVolt Portal prior to version 0.1 that leads to Information Disclosure. A remote authenticated attacker could leverage this vulnerability to read files from any location on the target operating system with web server privileges.