Yuan1994 vulnerabilities
We track 2 vulnerabilities in Yuan1994 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on February 7, 2026.
2vulnerabilities
1critical
1high
0exploited
8.5average CVSS score
Latest Yuan1994 vulnerabilities
- 9.8 Critical severity
tpadmin: Unrestricted Upload of File with Dangerous Type
A security vulnerability has been detected in yuan1994 tpadmin up to 1.3.12. This affects an unknown part in the library /public/static/admin/lib/webuploader/0.1.5/server/preview.php of the component WebUploader. The manipulation leads to deserialization. The
- 7.2 High severity
tpAdmin: Unrestricted Upload of File with Dangerous Type
** UNSUPPORTED WHEN ASSIGNED ** A vulnerability, which was classified as problematic, has been found in yuan1994 tpAdmin 1.3.12. This issue affects the function Upload of the file application\admin\controller\Upload.php. The manipulation of the argument file l