Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-4pj3-gqqh-fxcr

Опубликовано: 04 июл. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 6.8

Описание

QR/demoapp/qr_image.php in Asial JpGraph Professional through 4.2.6-pro allows remote attackers to execute arbitrary code via a PHP payload in the data parameter in conjunction with a .php file name in the filename parameter. This occurs because an unnecessary QR/demoapp folder.is shipped with the product.

QR/demoapp/qr_image.php in Asial JpGraph Professional through 4.2.6-pro allows remote attackers to execute arbitrary code via a PHP payload in the data parameter in conjunction with a .php file name in the filename parameter. This occurs because an unnecessary QR/demoapp folder.is shipped with the product.

EPSS

Процентиль: 54%
0.00806
Низкий

6.8 Medium

CVSS3

Дефекты

CWE-94

Связанные уязвимости

CVSS3: 9.8
nvd
около 2 лет назад

QR/demoapp/qr_image.php in Asial JpGraph Professional through 4.2.6-pro allows remote attackers to execute arbitrary code via a PHP payload in the data parameter in conjunction with a .php file name in the filename parameter. This occurs because an unnecessary QR/demoapp folder.is shipped with the product.

EPSS

Процентиль: 54%
0.00806
Низкий

6.8 Medium

CVSS3

Дефекты

CWE-94