CVE-2023-1970

** UNSUPPORTED WHEN ASSIGNED ** A vulnerability, which was classified as problematic, has been found in yuan1994 tpAdmin 1.3.12. This issue affects the function Upload of the file application\admin\controller\Upload.php. The manipulation of the argument file leads to unrestricted upload. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-225407. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.

• CWE-434

• https://tib36.github.io/2023/04/09/tpAdmin-RCE/Exploit, Third Party Advisory
• https://vuldb.com/?ctiid.225407Permissions Required, Third Party Advisory
• https://vuldb.com/?id.225407Third Party Advisory
• https://tib36.github.io/2023/04/09/tpAdmin-RCE/Exploit, Third Party Advisory
• https://vuldb.com/?ctiid.225407Permissions Required, Third Party Advisory
• https://vuldb.com/?id.225407Third Party Advisory

Published

Apr 10, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-1964A vulnerability classified as critical has been found in PHP…9.1
• CVE-2023-1965An issue has been discovered in GitLab EE affecting all vers…6.5
• CVE-2023-1966Instruments with Illumina Universal Copy Service v1.x and v2…9.8
• CVE-2023-1967Keysight N8844A Data Analytics Web Service deserializes untr…9.8
• CVE-2023-1968 Instruments with Illumina Universal Copy Service v2.x are v…7.5
• CVE-2023-1969A vulnerability classified as critical was found in SourceCo…9.8
• CVE-2023-1971** UNSUPPORTED WHEN ASSIGNED ** A vulnerability, which was c…4.9
• CVE-2023-1972A potential heap based buffer overflow was found in _bfd_elf…6.5
• CVE-2023-1973A flaw was found in Undertow package. Using the FormAuthenti…7.5
• CVE-2023-1974Exposure of Sensitive Information Through Metadata in GitHub…6.5
• CVE-2023-1975Insertion of Sensitive Information Into Sent Data in GitHub …6.5
• CVE-2023-1976Password Aging with Long Expiration in GitHub repository ans…8.8