Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-7jv3-m85g-h6v2

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

Pear Admin Think through 2.1.2 has an arbitrary file upload vulnerability that allows attackers to execute arbitrary code remotely. A .php file can be uploaded via admin.php/index/upload because app/common/service/UploadService.php mishandles fileExt.

Pear Admin Think through 2.1.2 has an arbitrary file upload vulnerability that allows attackers to execute arbitrary code remotely. A .php file can be uploaded via admin.php/index/upload because app/common/service/UploadService.php mishandles fileExt.

EPSS

Процентиль: 75%
0.00853
Низкий

Дефекты

CWE-434

Связанные уязвимости

CVSS3: 9.8
nvd
больше 4 лет назад

Pear Admin Think through 2.1.2 has an arbitrary file upload vulnerability that allows attackers to execute arbitrary code remotely. A .php file can be uploaded via admin.php/index/upload because app/common/service/UploadService.php mishandles fileExt.

EPSS

Процентиль: 75%
0.00853
Низкий

Дефекты

CWE-434