Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-j8wp-62vq-268h

Опубликовано: 06 мар. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 8.8

Описание

A vulnerability, which was classified as problematic, was found in ECshop up to 4.1.8. This affects an unknown part of the component New Product Handler. The manipulation leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-222357 was assigned to this vulnerability.

A vulnerability, which was classified as problematic, was found in ECshop up to 4.1.8. This affects an unknown part of the component New Product Handler. The manipulation leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-222357 was assigned to this vulnerability.

EPSS

Процентиль: 24%
0.00081
Низкий

8.8 High

CVSS3

Дефекты

CWE-434

Связанные уязвимости

CVSS3: 4.7
nvd
почти 3 года назад

A vulnerability, which was classified as problematic, was found in ECshop up to 4.1.8. This affects an unknown part of the component New Product Handler. The manipulation leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-222357 was assigned to this vulnerability.

CVSS3: 8.8
fstec
почти 3 года назад

Уязвимость компонента New Product Handler системы торговых центров электронной коммерции ECShop, позволяющая нарушителю загружать произвольные файлы

EPSS

Процентиль: 24%
0.00081
Низкий

8.8 High

CVSS3

Дефекты

CWE-434