writeups.xyz / Case of Admin Bypass for RCE, XSS, and Information Disclosure

Submitter : c2a

Date: 3 November 2022

Bounty : undisclosed

Vulnerabilities :

• RCE
• Unrestricted File Upload
• Stored XSS
• Information Disclosure

Programs :

• Undisclosed

Authors :

• Sam Paredes (@Caffeinevulns)

Link :
https://caffeinevulns.com/rces-and-acpvs/