Description
SoftVibe SARABAN for INFOMA 1.1 allows Unauthenticated unrestricted File Upload, that allows attackers to upload files with any file extension which can lead to arbitrary code execution.
References (4)
Core 4
Core References
Product x_refsource_misc
https://play.google.com/store/apps/details?id=th.co.softvibe.saraban&hl=en&gl=US
Exploit, Third Party Advisory, URL Repurposed x_refsource_misc
https://orangeo.tech/post/2021/12/24/First-CVEs.html
Exploit, Third Party Advisory x_refsource_misc
https://sawatdee.github.io/post/2021/12/24/First-CVEs.html
Product x_refsource_misc
http://www.infoma.net/index.php/saraban/
Scores
CVSS v3
9.8
EPSS
0.0155
EPSS Percentile
81.5%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Details
CWE
CWE-434
Status
published
Products (1)
softvibe/saraban
1.1
Published
Jan 18, 2022
Tracked Since
Feb 18, 2026