Tpadmin Project Tpadmin vulnerabilities

CVE-2026-2113 [CRITICAL] CWE-20 CVE-2026-2113: A security vulnerability has been detected in yuan1994 tpadmin up to 1.3.12. This affects an unknown A security vulnerability has been detected in yuan1994 tpadmin up to 1.3.12. This affects an unknown part in the library /public/static/admin/lib/webuploader/0.1.5/server/preview.php of the component WebUploader. The manipulation leads to deserialization. The attack is possible to be carried out remotely. The exploit has been disclosed publicly and m

CVE-2023-1970 [HIGH] CWE-434 CVE-2023-1970: ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability, which was classified as problematic, has been found ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability, which was classified as problematic, has been found in yuan1994 tpAdmin 1.3.12. This issue affects the function Upload of the file application\admin\controller\Upload.php. The manipulation of the argument file leads to unrestricted upload. The attack may be initiated remotely. The exploit has been disclos

CVE-2023-1971 [MEDIUM] CWE-918 CVE-2023-1971: ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability, which was classified as critical, was found in yuan ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability, which was classified as critical, was found in yuan1994 tpAdmin 1.3.12. Affected is the function remote of the file application\admin\controller\Upload.php. The manipulation of the argument url leads to server-side request forgery. It is possible to launch the attack remotely. The exploit has been discl