CVE-2023-7026 MEDIUM

CVE-2023-7026: Lightxun IPTV Gateway web_upload_template.html unrestricted upload

Vendor Lightxun
Product IPTV Gateway
Weakness CWE-434 · Unrestricted file upload
Published December 21, 2023
Last update November 21, 2024
View on NVD All CVEs

CVSS base score

4.3/10
Attack vector Network
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality Low
Integrity None

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

What the vulnerability does

01Description

A vulnerability was found in Lightxun IPTV Gateway up to 20231208. It has been rated as problematic. This issue affects some unknown processing of the file /ZHGXTV/index.php/admin/index/web_upload_template.html. The manipulation of the argument file leads to unrestricted upload. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-248579.

Key dates

02Disclosure timeline

December 21, 2023 CVE published
November 21, 2024 Record updated

Related vulnerabilities

04Related CVE

CVE-2025-31342 Galaxy Software Services Vitals ESP Forum Module - Unrestricted Upload of File with Dangerous Type CVE-2022-47186 Unrestricted Upload of File vulnerability in Generex CS141 CVE-2026-53787 Amasty Order Attributes for Magento 2 < 4.0.0 Unauthenticated Arbitrary File Upload CVE-2024-7074 Authenticated Arbitrary File Upload in Multiple WSO2 Products via SOAP Admin Service Leading to Remote Code Execution CVE-2021-21350 XStream is vulnerable to an Arbitrary Code Execution attack