Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-xjx3-pxg9-f9p4

Опубликовано: 15 дек. 2025
Источник: github
Github: Не прошло ревью
CVSS4: 6.9
CVSS3: 9.8

Описание

Soosyze 2.0.0 contains a file upload vulnerability that allows attackers to upload arbitrary HTML files with embedded PHP code to the application. Attackers can exploit the broken file upload mechanism to potentially view sensitive file paths and execute malicious PHP scripts on the server.

Soosyze 2.0.0 contains a file upload vulnerability that allows attackers to upload arbitrary HTML files with embedded PHP code to the application. Attackers can exploit the broken file upload mechanism to potentially view sensitive file paths and execute malicious PHP scripts on the server.

EPSS

Процентиль: 35%
0.0014
Низкий

6.9 Medium

CVSS4

9.8 Critical

CVSS3

Дефекты

CWE-434

Связанные уязвимости

CVSS3: 9.8
nvd
около 2 месяцев назад

Soosyze 2.0.0 contains a file upload vulnerability that allows attackers to upload arbitrary HTML files with embedded PHP code to the application. Attackers can exploit the broken file upload mechanism to potentially view sensitive file paths and execute malicious PHP scripts on the server.

EPSS

Процентиль: 35%
0.0014
Низкий

6.9 Medium

CVSS4

9.8 Critical

CVSS3

Дефекты

CWE-434