exploitDog

GHSA-m2gj-q632-499h

Опубликовано: 23 мар. 2023

Источник: github

Github: Не прошло ревью

CVSS3: 8.8

Описание

File upload vulnerability in CSKaza CSZ CMS v.1.2.2 fixed in v1.2.4 allows attacker to execute aritrary commands and code via crafted PHP file.

File upload vulnerability in CSKaza CSZ CMS v.1.2.2 fixed in v1.2.4 allows attacker to execute aritrary commands and code via crafted PHP file.

Ссылки

EPSS

Процентиль: 29%

0.00103

Низкий

8.8 High

CVSS3

CVE ID

Дефекты

CWE-434

Связанные уязвимости

CVE-2020-19786

CVSS3: 8.8

nvd

почти 3 года назад

File upload vulnerability in CSKaza CSZ CMS v.1.2.2 fixed in v1.2.4 allows attacker to execute aritrary commands and code via crafted PHP file.

EPSS

Процентиль: 29%

0.00103

Низкий

8.8 High

CVSS3

CVE ID

Дефекты

CWE-434