Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-6xrw-49j6-7f3m

Опубликовано: 03 апр. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 9.8

Описание

Arbitrary file write vulnerability in beescms v.4.0, allows a remote attacker to execute arbitrary code via a file path that was not isolated and the suffix was not verified in admin_template.php.

Arbitrary file write vulnerability in beescms v.4.0, allows a remote attacker to execute arbitrary code via a file path that was not isolated and the suffix was not verified in admin_template.php.

EPSS

Процентиль: 88%
0.04093
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-94

Связанные уязвимости

CVSS3: 9.8
nvd
почти 2 года назад

Arbitrary file write vulnerability in beescms v.4.0, allows a remote attacker to execute arbitrary code via a file path that was not isolated and the suffix was not verified in admin_template.php.

EPSS

Процентиль: 88%
0.04093
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-94