Описание
Unrestricted file upload vulnerability in PaperThin CommonSpot before 7.0.2 and 8.x before 8.0.3 allows remote attackers to execute arbitrary code by uploading a ColdFusion page, and then accessing it via unspecified vectors.
Комментарий
Per: http://cwe.mitre.org/data/definitions/434.html "CWE-434: Unrestricted Upload of File with Dangerous Type"
Ссылки
- US Government Resource
- US Government Resource
Уязвимые конфигурации
Конфигурация 1Версия до 7.0.1 (включая)
Одно из
cpe:2.3:a:paperthin:commonspot_content_server:*:*:*:*:*:*:*:*
cpe:2.3:a:paperthin:commonspot_content_server:8.0.0:*:*:*:*:*:*:*
cpe:2.3:a:paperthin:commonspot_content_server:8.0.1:*:*:*:*:*:*:*
cpe:2.3:a:paperthin:commonspot_content_server:8.0.2:*:*:*:*:*:*:*
EPSS
Процентиль: 88%
0.04111
Низкий
10 Critical
CVSS2
Дефекты
NVD-CWE-Other
Связанные уязвимости
github
больше 3 лет назад
Unrestricted file upload vulnerability in PaperThin CommonSpot before 7.0.2 and 8.x before 8.0.3 allows remote attackers to execute arbitrary code by uploading a ColdFusion page, and then accessing it via unspecified vectors.
EPSS
Процентиль: 88%
0.04111
Низкий
10 Critical
CVSS2
Дефекты
NVD-CWE-Other