D-ZERO CO.,LTD. vulnerabilities
Published CVEs affecting D-ZERO CO.,LTD. products: 2 record(s), with severity, exploitation and fixes.
CVE-2026-84063
Medium · 6.5
CWE-434 Sep 10, 2026
Unrestricted Upload of File with Dangerous Type in D-ZERO CO.,LTD. BurgerEditor
BurgerEditor 3.2.0 through 3.4.0 contains an issue with unrestricted upload of file with dangerous type. If this vulnerability is exploited, an arbitrary file may be uploaded by an attacker who can log in to the product, potentially allowing arbitrary PHP code to be executed.
CVE-2026-84062
Medium · 4.3
CWE-639 Sep 10, 2026
Authorization Bypass Through User-Controlled Key (IDOR) in D-ZERO CO.,LTD. BurgerEditor
BurgerEditor 3.0.0 through 3.4.0 contains an issue with authorization bypass through user-controlled key. If this vulnerability is exploited, the content of the page may be altered by an attacker who can log in to the product.