Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-wxjf-3fx4-4h78

Опубликовано: 29 июн. 2025
Источник: github
Github: Не прошло ревью
CVSS4: 2
CVSS3: 4.7

Описание

A vulnerability classified as critical was found in SourceCodester Simple Company Website 1.0. This vulnerability affects unknown code of the file /classes/SystemSettings.php?f=update_settings. The manipulation of the argument img leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

A vulnerability classified as critical was found in SourceCodester Simple Company Website 1.0. This vulnerability affects unknown code of the file /classes/SystemSettings.php?f=update_settings. The manipulation of the argument img leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

EPSS

Процентиль: 23%
0.00077
Низкий

2 Low

CVSS4

4.7 Medium

CVSS3

Дефекты

CWE-284

Связанные уязвимости

CVSS3: 4.7
nvd
7 месяцев назад

A vulnerability classified as critical was found in SourceCodester Simple Company Website 1.0. This vulnerability affects unknown code of the file /classes/SystemSettings.php?f=update_settings. The manipulation of the argument img leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

EPSS

Процентиль: 23%
0.00077
Низкий

2 Low

CVSS4

4.7 Medium

CVSS3

Дефекты

CWE-284