CyberSecBulletin

WADE DIGITAL DESIGN CO vulnerabilities

We track 2 vulnerabilities in WADE DIGITAL DESIGN CO products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on June 2, 2023.

2vulnerabilities
1critical
1high
0exploited
9.3average CVSS score

Latest WADE DIGITAL DESIGN CO vulnerabilities

  • 8.8 High severity

    FANTSY: Unrestricted Upload of File with Dangerous Type

    CVE-2023-28699WADE DIGITAL DESIGN CO

    Wade Graphic Design FANTSY has a vulnerability of insufficient filtering for file type in its file update function. An authenticated remote attacker with general user privilege can exploit this vulnerability to upload a PHP file containing a webshell to perfor

  • 9.8 Critical severity

    FANTSY: Incorrect Authorization

    CVE-2023-28698WADE DIGITAL DESIGN CO

    Wade Graphic Design FANTSY has a vulnerability of insufficient authorization check. An unauthenticated remote user can exploit this vulnerability by modifying URL parameters to gain administrator privileges to perform arbitrary system operation or disrupt serv