Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-g574-v9wx-6x2q

Опубликовано: 19 окт. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 9.8

Описание

KnowBand supercheckout > 5.0.7 and < 6.0.7 is vulnerable to Unrestricted Upload of File with Dangerous Type. In the module "Module One Page Checkout, Social Login & Mailchimp" (supercheckout), a guest can upload files with extensions .php

KnowBand supercheckout > 5.0.7 and < 6.0.7 is vulnerable to Unrestricted Upload of File with Dangerous Type. In the module "Module One Page Checkout, Social Login & Mailchimp" (supercheckout), a guest can upload files with extensions .php

EPSS

Процентиль: 43%
0.00206
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-434

Связанные уязвимости

CVSS3: 9.8
nvd
больше 2 лет назад

KnowBand supercheckout > 5.0.7 and < 6.0.7 is vulnerable to Unrestricted Upload of File with Dangerous Type. In the module "Module One Page Checkout, Social Login & Mailchimp" (supercheckout), a guest can upload files with extensions .php

EPSS

Процентиль: 43%
0.00206
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-434