📦 Savane

This vulnerability allows remote attackers to execute arbitrary code on systems running vulnerable versions of GNU Savane by uploading a specially crafted file to the upload.php component. Attackers c...

This vulnerability in GNU Savane allows remote attackers to escalate privileges by manipulating the form_id parameter in the form_header() function. Attackers can gain administrative access to the Sav...

This CVE describes an Insecure Direct Object Reference (IDOR) vulnerability in GNU Savane that allows remote attackers to delete arbitrary files on the server. Attackers can exploit this by sending cr...