CVE-2024-22515

CVE-2024-22515 arbitrary file upload and CVE-2024-22514 remote code execution for AgentDVR 5.1.6.0 (Authenticated)

AgentDVR-5160-File-Upload-and-Remote-Code-Execution CVE-2024-22515 arbitrary file upload and CVE-2024-22514 remote code execution for AgentDVR 5160 (Authenticated) (Older versions likely affected) githubcom/Orange-418/CVE-2024-22514-Remote-Code-Execution githubcom/Orange-418/CVE-2024-22515-File-Upload-Vulnerability wwwispyconnectcom/ ww

CVE-2024-22515: File Upload Vulnerability in Agent DVR Information Description In iSpyConnectcom Agent DVR 5160, there is a lack of verification of file type for sound file uploads This allows an authenticated user to upload any file type through the upload audio component simply by toggling to all files in the file open dialog Additional Information This vulnerability ma