← Database

CVE-2026-73328

HIGH CVSS: 7.2 Published: 2026-11-03 Modified: 2026-11-03

Description

Volmarg Personal Management System through 2.1.0 contains an unrestricted file upload vulnerability that allows authenticated users to upload PHP files via the /upload/send/ endpoint. Attackers can submit base64 fileContent with a .php fileName into the web root and request it to execute code as the web server user.

Affected Platforms

Unknown

Weakness Type

CWE-434

References