Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-979x-3p5w-qvgc

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

vFairs 3.3 is affected by Remote Code Execution. Any user logged in to a vFairs virtual conference or event can abuse the functionality to upload a profile picture in order to place a malicious PHP file on the server and gain code execution.

vFairs 3.3 is affected by Remote Code Execution. Any user logged in to a vFairs virtual conference or event can abuse the functionality to upload a profile picture in order to place a malicious PHP file on the server and gain code execution.

EPSS

Процентиль: 86%
0.02951
Низкий

Дефекты

CWE-434

Связанные уязвимости

CVSS3: 8.8
nvd
больше 4 лет назад

vFairs 3.3 is affected by Remote Code Execution. Any user logged in to a vFairs virtual conference or event can abuse the functionality to upload a profile picture in order to place a malicious PHP file on the server and gain code execution.

EPSS

Процентиль: 86%
0.02951
Низкий

Дефекты

CWE-434