Описание
EZPhotoSales 1.9.3 and earlier allows remote attackers to download arbitrary image files via (1) a direct request for a URL under OnlineViewing/galleries/ or (2) navigation of the gallery user interface with JavaScript disabled.
Ссылки
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:ez_photo_sales:ez_photo_sales:1.9.3:*:*:*:*:*:*:*
EPSS
Процентиль: 72%
0.01517
Низкий
5 Medium
CVSS2
Дефекты
NVD-CWE-Other
Связанные уязвимости
github
больше 4 лет назад
EZPhotoSales 1.9.3 and earlier allows remote attackers to download arbitrary image files via (1) a direct request for a URL under OnlineViewing/galleries/ or (2) navigation of the gallery user interface with JavaScript disabled.
EPSS
Процентиль: 72%
0.01517
Низкий
5 Medium
CVSS2
Дефекты
NVD-CWE-Other