security.nuyts.tech
CVE-2021-43176 – NuytsTech Security
The GOautodial API prior to commit 3c3a979 made on October 13th, 2021 takes a user-supplied “action” parameter and appends a .php file extension to
