Startutorial vulnerabilities
We track 1 vulnerability in Startutorial products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on December 26, 2023.
1vulnerabilities
0critical
1high
0exploited
8.1average CVSS score
Latest Startutorial vulnerabilities
- 8.1 High severity
PHP Backend For Resumable.js: Unrestricted Upload of File with Dangerous Type
resumable.php (aka PHP backend for resumable.js) 0.1.4 before 3c6dbf5 allows arbitrary file upload anywhere in the filesystem via ../ in multipart/form-data content to upload.php. (File overwrite hasn't been possible with the code available in GitHub in recent