Search Results (1 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-73328 1 Personal-management-system 1 Personal Management System 2026-11-03 7.2 High
Volmarg Personal Management System through 2.1.0 contains an unrestricted file upload vulnerability that allows authenticated users to upload PHP files via the /upload/send/ endpoint. Attackers can submit base64 fileContent with a .php fileName into the web root and request it to execute code as the web server user.