Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-9m86-pmxw-268g

Опубликовано: 07 нояб. 2025
Источник: github
Github: Не прошло ревью
CVSS4: 2.1
CVSS3: 6.3

Описание

A vulnerability was identified in projectworlds Online Notes Sharing Platform 1.0. Affected by this issue is some unknown functionality of the file /dashboard/userprofile.php. Such manipulation of the argument image leads to unrestricted upload. The attack may be performed from remote. The exploit is publicly available and might be used.

A vulnerability was identified in projectworlds Online Notes Sharing Platform 1.0. Affected by this issue is some unknown functionality of the file /dashboard/userprofile.php. Such manipulation of the argument image leads to unrestricted upload. The attack may be performed from remote. The exploit is publicly available and might be used.

EPSS

Процентиль: 16%
0.00051
Низкий

2.1 Low

CVSS4

6.3 Medium

CVSS3

Дефекты

CWE-284
CWE-434

Связанные уязвимости

CVSS3: 6.3
nvd
3 месяца назад

A vulnerability was identified in projectworlds Online Notes Sharing Platform 1.0. Affected by this issue is some unknown functionality of the file /dashboard/userprofile.php. Such manipulation of the argument image leads to unrestricted upload. The attack may be performed from remote. The exploit is publicly available and might be used.

EPSS

Процентиль: 16%
0.00051
Низкий

2.1 Low

CVSS4

6.3 Medium

CVSS3

Дефекты

CWE-284
CWE-434