Volerion logoVolerion
Volerion logoVolerion

Galaxy Software Services Corporation Vitals ESP Forum Module Unrestricted File Upload Vulnerability Allowing Command Execution

Vulnerability

A vulnerability exists in the upload file function of the Galaxy Software Services Corporation Vitals ESP Forum Module, through version 1.3. This vulnerability allows remote authenticated users to upload files with dangerous types, which can lead to the execution of arbitrary system commands.

Impact

Exploitation of this vulnerability could result in unauthorized execution of system commands on the server where the application is hosted.

Added: Oct 20, 2025, 8:18 AM
Updated: Oct 20, 2025, 8:18 AM

Vulnerability Rating

Custom Algorithm
spread
0.0
impact
10.0
exploitability
5.2
remediation
0.0
relevance
0.8
threat
0.0
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.