Vulnerabilities > Bearadmin Project

DATE CVE VULNERABILITY TITLE RISK
2023-02-17 CVE-2021-35261 Unrestricted Upload of File with Dangerous Type vulnerability in Bearadmin Project Bearadmin
File Upload Vulnerability in Yupoxion BearAdmin before commit 10176153528b0a914eb4d726e200fd506b73b075 allows attacker to execute arbitrary remote code via the Upfile function of the extend/tools/Ueditor endpoint.
network
low complexity
bearadmin-project CWE-434
critical
 9.8
9.8
2018-05-24 CVE-2018-11414 SQL Injection vulnerability in Bearadmin Project Bearadmin 0.5
An issue was discovered in BearAdmin 0.5.
network
low complexity
bearadmin-project CWE-89
6.5
6.5
2018-05-24 CVE-2018-11413 Path Traversal vulnerability in Bearadmin Project Bearadmin 0.5
An issue was discovered in BearAdmin 0.5.
network
low complexity
bearadmin-project CWE-22
4.0
4.0