← Back to CVE List
CVE-2024-25274
An arbitrary file upload vulnerability in the component /sysFile/upload of Novel-Plus v4.3.0-RC1 allows attackers to execute arbitrary code via uploading a crafted file.
> MITRE Terms of Use apply – see LICENSE‑MITRE.txt