Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-xjqm-3cpf-r6x4

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

Serendipity before 2.3.4 on Windows allows remote attackers to execute arbitrary code because the filename of a renamed file may end with a dot. This file may then be renamed to have a .php filename.

Serendipity before 2.3.4 on Windows allows remote attackers to execute arbitrary code because the filename of a renamed file may end with a dot. This file may then be renamed to have a .php filename.

EPSS

Процентиль: 88%
0.03798
Низкий

Связанные уязвимости

CVSS3: 9.8
ubuntu
почти 6 лет назад

Serendipity before 2.3.4 on Windows allows remote attackers to execute arbitrary code because the filename of a renamed file may end with a dot. This file may then be renamed to have a .php filename.

CVSS3: 9.8
nvd
почти 6 лет назад

Serendipity before 2.3.4 on Windows allows remote attackers to execute arbitrary code because the filename of a renamed file may end with a dot. This file may then be renamed to have a .php filename.

CVSS3: 9.8
debian
почти 6 лет назад

Serendipity before 2.3.4 on Windows allows remote attackers to execute ...

EPSS

Процентиль: 88%
0.03798
Низкий