Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-4pj3-gqqh-fxcr

Опубликовано: 04 июл. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 6.8

Описание

QR/demoapp/qr_image.php in Asial JpGraph Professional through 4.2.6-pro allows remote attackers to execute arbitrary code via a PHP payload in the data parameter in conjunction with a .php file name in the filename parameter. This occurs because an unnecessary QR/demoapp folder.is shipped with the product.

QR/demoapp/qr_image.php in Asial JpGraph Professional through 4.2.6-pro allows remote attackers to execute arbitrary code via a PHP payload in the data parameter in conjunction with a .php file name in the filename parameter. This occurs because an unnecessary QR/demoapp folder.is shipped with the product.

EPSS

Процентиль: 91%
0.07211
Низкий

6.8 Medium

CVSS3

Дефекты

CWE-94

Связанные уязвимости

CVSS3: 9.8
nvd
больше 1 года назад

QR/demoapp/qr_image.php in Asial JpGraph Professional through 4.2.6-pro allows remote attackers to execute arbitrary code via a PHP payload in the data parameter in conjunction with a .php file name in the filename parameter. This occurs because an unnecessary QR/demoapp folder.is shipped with the product.

EPSS

Процентиль: 91%
0.07211
Низкий

6.8 Medium

CVSS3

Дефекты

CWE-94