CVE-2024-36528

Publication date

2024-06-10 00:00:00

Family

mitre

State

PUBLISHED

Description

nukeviet v.4.5 and before and nukeviet-egov v.1.2.02 and before have a Deserialization vulnerability which results in code execution via /admin/extensions/download.php and /admin/extensions/upload.php.