Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-9c4c-j76h-qwm7

Опубликовано: 28 окт. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 7.2

Описание

Online Pet Shop We App v1.0 was discovered to contain an arbitrary file upload vulnerability via the Editing function in the User module. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file uploaded through the picture upload point.

Online Pet Shop We App v1.0 was discovered to contain an arbitrary file upload vulnerability via the Editing function in the User module. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file uploaded through the picture upload point.

EPSS

Процентиль: 76%
0.0094
Низкий

7.2 High

CVSS3

Дефекты

CWE-434

Связанные уязвимости

CVSS3: 7.2
nvd
больше 3 лет назад

Online Pet Shop We App v1.0 was discovered to contain an arbitrary file upload vulnerability via the Editing function in the User module. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file uploaded through the picture upload point.

EPSS

Процентиль: 76%
0.0094
Низкий

7.2 High

CVSS3

Дефекты

CWE-434