MoneyPrinterTurbo vulnerabilities
5 known vulnerabilities in MoneyPrinterTurbo from Harry0703. 5 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 8.8 High severity
MoneyPrinterTurbo: Improper Limitation of a Pathname to a Restricted Directory
A weakness has been identified in harry0703 MoneyPrinterTurbo up to 1.2.6. The impacted element is the function upload_music of the file app/controllers/v1/music.py of the component API Endpoint. Executing a manipulation of the argument File can lead to path t
- 7.5 High severity
MoneyPrinterTurbo: Improper Limitation of a Pathname to a Restricted Directory
A vulnerability has been found in harry0703 MoneyPrinterTurbo up to 1.2.6. The impacted element is the function download_video/stream_video of the file app/controllers/v1/video.py of the component URL Handler. The manipulation of the argument file_path leads t
- 9.8 Critical severity
MoneyPrinterTurbo: Missing Authentication for Critical Functionality
A vulnerability was found in harry0703 MoneyPrinterTurbo up to 1.2.6 and classified as critical. Affected by this issue is the function verify_token of the file app/controllers/base.py of the component API Endpoint. The manipulation leads to missing authentica
- 7.5 High severity
MoneyPrinterTurbo: Improper Limitation of a Pathname to a Restricted Directory
A vulnerability has been found in harry0703 MoneyPrinterTurbo up to 1.2.6 and classified as critical. Affected by this vulnerability is the function download_video/delete_video of the file app/controllers/v1/video.py. The manipulation leads to path traversal.
- 9.8 Critical severity
MoneyPrinterTurbo: Unrestricted Upload of File with Dangerous Type
A vulnerability, which was classified as critical, was found in harry0703 MoneyPrinterTurbo up to 1.2.6. Affected is the function upload_bgm_file of the file app/controllers/v1/video.py of the component File Extension Handler. The manipulation of the argument