GHSA-q3h9-349m-77jhCriticalCVSS 9.8

Delta Sql 1.8.2 contains an arbitrary file upload vulnerability that allows unauthenticated...

Published
May 30, 2026
Last Modified
May 30, 2026

🔗 CVE IDs covered (1)

📋 Description

Delta Sql 1.8.2 contains an arbitrary file upload vulnerability that allows unauthenticated attackers to upload malicious files by sending POST requests to docs_upload.php with crafted multipart form data. Attackers can upload PHP files with arbitrary content to the upload directory and execute them on the server for remote code execution.

🔗 References (7)