Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-6m93-gmrj-jf29

Опубликовано: 25 янв. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 7.2

Описание

An arbitrary file upload vulnerability in LeptonCMS v7.0.0 allows authenticated attackers to execute arbitrary code via uploading a crafted PHP file.

An arbitrary file upload vulnerability in LeptonCMS v7.0.0 allows authenticated attackers to execute arbitrary code via uploading a crafted PHP file.

EPSS

Процентиль: 82%
0.01742
Низкий

7.2 High

CVSS3

Дефекты

CWE-434

Связанные уязвимости

CVSS3: 7.2
nvd
около 2 лет назад

An arbitrary file upload vulnerability in LEPTON v7.0.0 allows authenticated attackers to execute arbitrary PHP code by uploading this code to the backend/languages/index.php languages area.

EPSS

Процентиль: 82%
0.01742
Низкий

7.2 High

CVSS3

Дефекты

CWE-434