Описание
images.php in Justin White (aka YTZ) Free Web Publishing System (FreeWPS) 2.11 allows remote attackers to execute arbitrary PHP code by uploading a .php file into the /upload directory as specified in the dirPath parameter, then performing a direct request to that file.
Ссылки
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:justin_white:freewps:2.11:*:*:*:*:*:*:*
EPSS
Процентиль: 90%
0.05725
Низкий
7.5 High
CVSS2
Дефекты
NVD-CWE-Other
Связанные уязвимости
github
почти 4 года назад
images.php in Justin White (aka YTZ) Free Web Publishing System (FreeWPS) 2.11 allows remote attackers to execute arbitrary PHP code by uploading a .php file into the /upload directory as specified in the dirPath parameter, then performing a direct request to that file.
EPSS
Процентиль: 90%
0.05725
Низкий
7.5 High
CVSS2
Дефекты
NVD-CWE-Other