← Database

CVE-2023-23328

HIGH CVSS: 8.8 Published: 2023-03-10 Modified: 2026-07-09

Description

A File Upload vulnerability exists in AvantFAX 3.3.7. An authenticated user can bypass PHP file type validation in FileUpload.php by uploading a specially crafted PHP file.

Affected Platforms

Avantfax Avantfax

Weakness Type

CWE-434, CWE-434

References