Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-3w3q-6vq7-6wq8

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

S-Cart v6.4.1 and below was discovered to contain an arbitrary file upload vulnerability in the Editor module on the Admin panel. This vulnerability allows attackers to execute arbitrary code via a crafted IMG file.

S-Cart v6.4.1 and below was discovered to contain an arbitrary file upload vulnerability in the Editor module on the Admin panel. This vulnerability allows attackers to execute arbitrary code via a crafted IMG file.

EPSS

Процентиль: 75%
0.00865
Низкий

Дефекты

CWE-434

Связанные уязвимости

CVSS3: 8.8
nvd
больше 4 лет назад

S-Cart v6.4.1 and below was discovered to contain an arbitrary file upload vulnerability in the Editor module on the Admin panel. This vulnerability allows attackers to execute arbitrary code via a crafted IMG file.

EPSS

Процентиль: 75%
0.00865
Низкий

Дефекты

CWE-434