CVE-2023-39147 Information

Description

An arbitrary file upload vulnerability in Uvdesk 1.1.3 allows attackers to execute arbitrary code via uploading a crafted image file.

Reference

https://docs.google.com/document/d/1uv9DjHmKuDxZIjNhWX05EsxHEp8fGalXB7XK-QSyr_0/edit?usp=sharing http://packetstormsecurity.com/files/173878/Uvdesk-1.1.3-Shell-Upload.html