Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-2fxm-j6r7-q2qp

Опубликовано: 02 мая 2022
Источник: github
Github: Не прошло ревью

Описание

Unrestricted file upload vulnerability in Pulse CMS Basic 1.2.2 and 1.2.3, and possibly Pulse Pro before 1.3.2, allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in an unspecified directory.

Unrestricted file upload vulnerability in Pulse CMS Basic 1.2.2 and 1.2.3, and possibly Pulse Pro before 1.3.2, allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in an unspecified directory.

EPSS

Процентиль: 78%
0.01186
Низкий

Связанные уязвимости

nvd
почти 16 лет назад

Unrestricted file upload vulnerability in Pulse CMS Basic 1.2.2 and 1.2.3, and possibly Pulse Pro before 1.3.2, allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in an unspecified directory.

EPSS

Процентиль: 78%
0.01186
Низкий