共找到 4 条公开漏洞记录
DevDojo Voyager contains default credentials when run with dummy data. An attacker can obtain access to user accounts and access sensitive information, modify data, and/or execute unauthorized operations.
DevDojo Voyager through version 1.8.0 is vulnerable to bypassing the file type verification when an authenticated user uploads a file via /admin/media/upload. An authenticated user can upload a web shell causing arbitrary code execution on the server.
DevDojo Voyager through 1.8.0 is vulnerable to path traversal at the /admin/compass.
Voyager 1.3.0 is vulnerable to local file inclusion.