Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-2xqh-v5fc-3q4g

Опубликовано: 01 мая 2022
Источник: github
Github: Не прошло ревью

Описание

Unrestricted file upload vulnerability in upload/upload.php in Japanese PHP Gallery Hosting, when Open directory mode is enabled, allows remote attackers to upload and execute arbitrary PHP code via a ServerPath parameter specifying a filename with a double extension. NOTE: some of these details are obtained from third party information.

Unrestricted file upload vulnerability in upload/upload.php in Japanese PHP Gallery Hosting, when Open directory mode is enabled, allows remote attackers to upload and execute arbitrary PHP code via a ServerPath parameter specifying a filename with a double extension. NOTE: some of these details are obtained from third party information.

EPSS

Процентиль: 86%
0.03073
Низкий

Дефекты

CWE-20
CWE-94

Связанные уязвимости

nvd
больше 18 лет назад

Unrestricted file upload vulnerability in upload/upload.php in Japanese PHP Gallery Hosting, when Open directory mode is enabled, allows remote attackers to upload and execute arbitrary PHP code via a ServerPath parameter specifying a filename with a double extension. NOTE: some of these details are obtained from third party information.

EPSS

Процентиль: 86%
0.03073
Низкий

Дефекты

CWE-20
CWE-94