CyberRota Analysis
AI-GeneratedThe Veno File Manager Project 4.4.9 contains a vulnerability that allows authenticated super administrators to perform arbitrary file writes through a crafted POST request to the translations update endpoint. This could lead to unauthorized code execution or data manipulation by overwriting critical PHP files within the application. Organizations using this version should prioritize patching to mitigate potential exploitation risks.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Arbitrary file write in /vfm-admin/index.php?section=translations&action=update in Veno File Manager Project 4.4.9 allows an authenticated user with the role of super administrator to overwrite any php file in the application via a specially crafted POST request to the affected endpoint.