Search Results (2 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2024-36531 1 Nukeviet 2 Egovernment, Nukeviet 2025-09-15 5.7 Medium
nukeviet v.4.5 and before and nukeviet-egov v.1.2.02 and before are vulnerable to arbitrary code execution via the /admin/extensions/upload.php component.
CVE-2024-36528 1 Nukeviet 2 Egovernment, Nukeviet 2025-09-15 8.8 High
nukeviet v.4.5 and before and nukeviet-egov v.1.2.02 and before have a Deserialization vulnerability which results in code execution via /admin/extensions/download.php and /admin/extensions/upload.php.