Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-h464-v7f9-fwjm

Опубликовано: 21 дек. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 9.8

Описание

In AeroCms v0.0.1, there is an arbitrary file upload vulnerability at /admin/posts.php?source=edit_post , through which we can upload webshell and control the web server.

In AeroCms v0.0.1, there is an arbitrary file upload vulnerability at /admin/posts.php?source=edit_post , through which we can upload webshell and control the web server.

EPSS

Процентиль: 51%
0.00279
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-434

Связанные уязвимости

CVSS3: 7.2
nvd
около 3 лет назад

In AeroCms v0.0.1, there is an arbitrary file upload vulnerability at /admin/posts.php?source=edit_post , through which we can upload webshell and control the web server.

EPSS

Процентиль: 51%
0.00279
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-434