Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-6c67-cppc-86v4

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

Ultimate WooCommerce Gift Cards 3.0.2 is affected by a file upload vulnerability in the Custom GiftCard Template that can remotely execute arbitrary code. Once it contains the function "Custom Gift Card Template", the function of uploading a custom image is used, changing the name of the image extension to PHP and executing PHP code on the server.

Ultimate WooCommerce Gift Cards 3.0.2 is affected by a file upload vulnerability in the Custom GiftCard Template that can remotely execute arbitrary code. Once it contains the function "Custom Gift Card Template", the function of uploading a custom image is used, changing the name of the image extension to PHP and executing PHP code on the server.

EPSS

Процентиль: 72%
0.00706
Низкий

Дефекты

CWE-434

Связанные уязвимости

CVSS3: 8.8
nvd
около 5 лет назад

Ultimate WooCommerce Gift Cards 3.0.2 is affected by a file upload vulnerability in the Custom GiftCard Template that can remotely execute arbitrary code. Once it contains the function "Custom Gift Card Template", the function of uploading a custom image is used, changing the name of the image extension to PHP and executing PHP code on the server.

EPSS

Процентиль: 72%
0.00706
Низкий

Дефекты

CWE-434