Описание
Unrestricted file upload vulnerability in ftp_upload_file.php in Support Incident Tracker (aka SiT!) 3.65 allows remote authenticated users to execute arbitrary PHP code by uploading a PHP file, then accessing it via a direct request to the file in an unspecified directory.
Комментарий
Per: http://cwe.mitre.org/data/definitions/434.html
'CWE-434: Unrestricted Upload of File with Dangerous Type'
Ссылки
- Exploit
- Vendor Advisory
- Vendor Advisory
- Exploit
- US Government Resource
- Exploit
- Exploit
- Exploit
- Vendor Advisory
- Vendor Advisory
- Exploit
- US Government Resource
- Exploit
- Exploit
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:sitracker:support_incident_tracker:3.65:*:*:*:*:*:*:*
EPSS
Процентиль: 95%
0.21003
Средний
6 Medium
CVSS2
Дефекты
NVD-CWE-Other
Связанные уязвимости
github
больше 3 лет назад
Unrestricted file upload vulnerability in ftp_upload_file.php in Support Incident Tracker (aka SiT!) 3.65 allows remote authenticated users to execute arbitrary PHP code by uploading a PHP file, then accessing it via a direct request to the file in an unspecified directory.
EPSS
Процентиль: 95%
0.21003
Средний
6 Medium
CVSS2
Дефекты
NVD-CWE-Other