Delta Sql 1.8.2 contains an arbitrary file upload vulnerability that allows unauthenticated attackers to upload malicious files by sending POST requests to docs…

Delta SQL version 1.8.2 contains a critical arbitrary file upload vulnerability that allows unauthenticated attackers to upload and execute malicious PHP files. The vulnerability exists in the docs_upload.php endpoint which accepts crafted multipart form data without proper validation. Attackers can exploit this flaw by sending POST requests to upload PHP files with arbitrary content to the server's upload directory. Once uploaded, these malicious files can be executed on the server, leading to remote code execution. This vulnerability poses a high security risk as it requires no authentication and provides direct code execution capabilities to attackers.