CyberRota Analysis
AI-GeneratedThe Veno File Manager Project version 4.4.9 contains an incorrect access control vulnerability in the admin panel that allows unauthenticated attackers to extract application logs starting from a specified date through a crafted POST request. This could lead to the exposure of sensitive information, potentially compromising the integrity and confidentiality of the application. Organizations using this version of Veno File Manager should prioritize remediation to mitigate the risk of unauthorized data access.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Incorrect access control in /vfm-admin/admin-panel/view/save-cvs.php in Veno File Manager Project 4.4.9 allows an unauthenticated attacker to extract all application logs from a desired date forwards via a specially crafted POST request.