CVE-2023-7026

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

A vulnerability was found in Lightxun IPTV Gateway up to 20231208. It has been rated as problematic. This issue affects some unknown processing of the file /ZHGXTV/index.php/admin/index/web_upload_template.html. The manipulation of the argument file leads to unrestricted upload. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-248579.

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-434

Affected software

No affected versions have been published.

Timeline

Published: Dec 21, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-70275.4The POST SMTP Mailer – Email log, Delivery Failure Notifications and Best Mail SMTP for WordPress plugin for WordPress is vulnerable to Stor CVE-2023-70289.8An issue has been discovered in GitLab CE/EE affecting all versions from 16.1 prior to 16.1.6, 16.2 prior to 16.2.9, 16.3 prior to 16.3.7, 1 CVE-2023-70295.4The WordPress Button Plugin MaxButtons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcode(s) in al CVE-2023-70306.4The Collapse-O-Matic plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'expand' shortcode in all versions u CVE-2023-70314.3Insecure Direct Object Reference vulnerabilities were discovered in the Avaya Aura Experience Portal Manager which may allow partial informa CVE-2023-70327.8A CWE-502: Deserialization of untrusted data vulnerability exists that could allow an attacker logged in with a user level account to gain h CVE-2023-70335.3Insufficient Resource Pool vulnerability in Ethernet function of Mitsubishi Electric Corporation MELSEC iQ-R series CPU module, MELSEC iQ-L CVE-2023-70355.4A vulnerability was found in automad up to 1.10.9 and classified as problematic. Affected by this issue is some unknown functionality of the CVE-2023-70365.4A vulnerability was found in automad up to 1.10.9. It has been classified as problematic. This affects the function upload of the file FileC CVE-2023-70378.8A vulnerability was found in automad up to 1.10.9. It has been declared as critical. This vulnerability affects the function import of the f CVE-2023-70386.5A vulnerability was found in automad up to 1.10.9. It has been rated as problematic. This issue affects some unknown processing of the file CVE-2023-70399.8A vulnerability classified as critical has been found in Byzoro S210 up to 20231210. Affected is an unknown function of the file /importexpo