Show filters
2 Total Results
Displaying 1-2 of 2
Sort by:
Attacker Value
Unknown
CVE-2023-51805
Disclosure Date: January 13, 2024 (last updated January 25, 2024)
SQL Injection vulnerability in TDuckCLoud tduck-platform v.4.0 allows a remote attacker to obtain sensitive information via the getFormKey parameter in the search function of FormDataMysqlService.java file.
0
Attacker Value
Unknown
CVE-2023-37733
Disclosure Date: July 19, 2023 (last updated October 08, 2023)
An arbitrary file upload vulnerability in tduck-platform v4.0 allows attackers to execute arbitrary code via a crafted HTML file.
0
