writeups.xyz / Kramer VIA GO² – Multiple issues

Submitter : c2a

Date: 31 May 2023

Bounty : undisclosed

Vulnerabilities :

• RCE
• SQL Injection
• Arbitrary File Upload
• Arbitrary File Read

Programs :

• Kramer

Authors :

• Jim Rush (@JimSRush)
• Tomais Williamson (@Softpoison_)

Link :
https://zxsecurity.co.nz/research/advisories/kramer-via-go-2-rce-and-other-vulns/