Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-9xx5-8h94-vx2v

Опубликовано: 26 янв. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 6.1

Описание

An arbitrary file upload vulnerability in the component /alsdemo/ss/mediam.cgi of ShopSite v14.0 allows attackers to execute arbitrary code via uploading a crafted SVG file.

An arbitrary file upload vulnerability in the component /alsdemo/ss/mediam.cgi of ShopSite v14.0 allows attackers to execute arbitrary code via uploading a crafted SVG file.

EPSS

Процентиль: 26%
0.0009
Низкий

6.1 Medium

CVSS3

Дефекты

CWE-434

Связанные уязвимости

CVSS3: 6.1
nvd
около 2 лет назад

An arbitrary file upload vulnerability in the component /alsdemo/ss/mediam.cgi of ShopSite v14.0 allows attackers to execute arbitrary code via uploading a crafted SVG file.

EPSS

Процентиль: 26%
0.0009
Низкий

6.1 Medium

CVSS3

Дефекты

CWE-434