Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-9f6h-7v3v-h952

Опубликовано: 04 мар. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 7.8

Описание

A remote code execution (RCE) vulnerability in the Avatar parameter under /admin/?page=user/manage_user of Home Owners Collection Management System v1.0 allows attackers to execute arbitrary code via a crafted PNG file.

A remote code execution (RCE) vulnerability in the Avatar parameter under /admin/?page=user/manage_user of Home Owners Collection Management System v1.0 allows attackers to execute arbitrary code via a crafted PNG file.

EPSS

Процентиль: 82%
0.01713
Низкий

7.8 High

CVSS3

Дефекты

CWE-434

Связанные уязвимости

CVSS3: 7.8
nvd
почти 4 года назад

A remote code execution (RCE) vulnerability in the Avatar parameter under /admin/?page=user/manage_user of Home Owners Collection Management System v1.0 allows attackers to execute arbitrary code via a crafted PNG file.

EPSS

Процентиль: 82%
0.01713
Низкий

7.8 High

CVSS3

Дефекты

CWE-434