← Database

CVE-2024-48782

CRITICAL CVSS: 9.8 Published: 2024-10-15 Modified: 2026-06-17

Description

File Upload vulnerability in DYCMS Open-Source Version v2.0.9.41 allows a remote attacker to execute arbitrary code via the application only detecting the extension of image files in the front-end.

Affected Platforms

Unknown

Weakness Type

CWE-434

References