Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-x3c9-p79c-qhqc

Опубликовано: 24 нояб. 2025
Источник: github
Github: Не прошло ревью
CVSS4: 2
CVSS3: 4.7

Описание

A weakness has been identified in code-projects Online Bidding System 1.0. This issue affects the function categoryadd of the file /administrator/addcategory.php. This manipulation of the argument catimage causes unrestricted upload. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be exploited.

A weakness has been identified in code-projects Online Bidding System 1.0. This issue affects the function categoryadd of the file /administrator/addcategory.php. This manipulation of the argument catimage causes unrestricted upload. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be exploited.

EPSS

Процентиль: 24%
0.00082
Низкий

2 Low

CVSS4

4.7 Medium

CVSS3

Дефекты

CWE-284
CWE-434

Связанные уязвимости

CVSS3: 4.7
nvd
3 месяца назад

A weakness has been identified in code-projects Online Bidding System 1.0. This issue affects the function categoryadd of the file /administrator/addcategory.php. This manipulation of the argument catimage causes unrestricted upload. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be exploited.

EPSS

Процентиль: 24%
0.00082
Низкий

2 Low

CVSS4

4.7 Medium

CVSS3

Дефекты

CWE-284
CWE-434