CVE-2023-4559

A vulnerability, which was classified as critical, has been found in Bettershop LaikeTui. Affected by this issue is some unknown functionality of the file index.php?module=api&action=user&m=upload of the component POST Request Handler. The manipulation leads to unrestricted upload. The attack may be launched remotely. This product is using a rolling release to provide continious delivery. Therefore, no version details for affected nor updated releases are available. The identifier of this vulnerability is VDB-238160.

• CWE-434

• https://vuldb.com/?ctiid.238160Permissions Required, Third Party Advisory, VDB Entry
• https://vuldb.com/?id.238160Third Party Advisory, VDB Entry
• https://vuldb.com/?ctiid.238160Permissions Required, Third Party Advisory, VDB Entry
• https://vuldb.com/?id.238160Third Party Advisory, VDB Entry

Published

Aug 27, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-45584A double free vulnerability [CWE-415] vulnerability in Forti…7.2
• CVE-2023-45585An insertion of sensitive information into log file vulnerab…3.3
• CVE-2023-45586An insufficient verification of data authenticity vulnerabil…5
• CVE-2023-45587An improper neutralization of input during web page generati…5.4
• CVE-2023-45588An external control of file name or path vulnerability [CWE-…7.8
• CVE-2023-45589Rejected reason: Not used
• CVE-2023-45590An improper control of generation of code ('code injection')…8.8
• CVE-2023-45591A CWE-122 “Heap-based Buffer Overflow” vulnerability in the …8.8
• CVE-2023-45592A CWE-250 “Execution with Unnecessary Privileges” vulnerabil…9.8
• CVE-2023-45593A CWE-184 “Incomplete List of Disallowed Inputs” vulnerabili…6.8
• CVE-2023-45594A CWE-552 “Files or Directories Accessible to External Parti…6.8
• CVE-2023-45595A CWE-434 “Unrestricted Upload of File with Dangerous Type” …8.8