Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

CVE-2023-28698

WADE DIGITAL DESIGN CO, LTD. FANTSY - Broken Acesss Control

Wade Graphic Design FANTSY has a vulnerability of insufficient authorization check. An unauthenticated remote user can exploit this vulnerability by modifying URL parameters to gain administrator privileges to perform arbitrary system operation or disrupt service.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Wddgroup
Products
Fantsy
CVE-2023-28699

WADE DIGITAL DESIGN CO, LTD. FANTSY - Arbitrary File Upload

Wade Graphic Design FANTSY has a vulnerability of insufficient filtering for file type in its file update function. An authenticated remote attacker with general user privilege can exploit this vulnerability to upload a PHP file containing a webshell to perform arbitrary system operation or disrupt service.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Wddgroup
Products
Fantasy