Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-x7vg-mx5p-974m

Опубликовано: 23 мая 2023
Источник: github
Github: Не прошло ревью
CVSS3: 9.8

Описание

MicroEngine Mailform version 1.1.0 to 1.1.8 contains a path traversal vulnerability. If the product's file upload function and server save option are enabled, a remote attacker may save an arbitrary file on the server and execute it.

MicroEngine Mailform version 1.1.0 to 1.1.8 contains a path traversal vulnerability. If the product's file upload function and server save option are enabled, a remote attacker may save an arbitrary file on the server and execute it.

EPSS

Процентиль: 81%
0.01478
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-22

Связанные уязвимости

CVSS3: 9.8
nvd
больше 2 лет назад

MicroEngine Mailform version 1.1.0 to 1.1.8 contains a path traversal vulnerability. If the product's file upload function and server save option are enabled, a remote attacker may save an arbitrary file on the server and execute it.

EPSS

Процентиль: 81%
0.01478
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-22