exploitDog

CVE-2015-1587

Опубликовано: 19 фев. 2015

Источник: nvd

CVSS2: 7.5

EPSS Высокий

Описание

Unrestricted file upload vulnerability in file_to_index.php in Maarch LetterBox 2.8 and earlier and GEC/GED 1.4 and earlier allows remote attackers to execute arbitrary PHP code by uploading a file with a PHP extension, then accessing it via a request to a predictable filename in tmp/.

Комментарий

CWE-434: Unrestricted Upload of File with Dangerous Type

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:maarch:gec\/ged:*:*:*:*:*:*:*:*

Версия до 1.4 (включая)

cpe:2.3:a:maarch:letterbox:*:*:*:*:*:*:*:*

Версия до 2.8 (включая)

EPSS

Процентиль: 99%

0.79223

Высокий

7.5 High

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-gf79-62cr-g4pm

github

больше 3 лет назад

Unrestricted file upload vulnerability in file_to_index.php in Maarch LetterBox 2.8 and earlier and GEC/GED 1.4 and earlier allows remote attackers to execute arbitrary PHP code by uploading a file with a PHP extension, then accessing it via a request to a predictable filename in tmp/.

EPSS

Процентиль: 99%

0.79223

Высокий

7.5 High

CVSS2

Дефекты

NVD-CWE-Other