Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2015-1371

Опубликовано: 27 янв. 2015
Источник: nvd
CVSS2: 7.5
EPSS Низкий

Описание

Unrestricted file upload vulnerability in ferretCMS 1.0.4-alpha allows remote administrators to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in custom/uploads/.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:ferretcms_project:ferretcms:1.0.4:alpha:*:*:*:*:*:*

EPSS

Процентиль: 92%
0.09226
Низкий

7.5 High

CVSS2

Дефекты

CWE-20

Связанные уязвимости

github
больше 3 лет назад

Unrestricted file upload vulnerability in ferretCMS 1.0.4-alpha allows remote administrators to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in custom/uploads/.

EPSS

Процентиль: 92%
0.09226
Низкий

7.5 High

CVSS2

Дефекты

CWE-20