CVE-2015-5951

Опубликовано: 06 янв. 2020

Источник: nvd

CVSS3: 9.9

CVSS2: 9

EPSS Низкий

Описание

A file upload issue exists in the specid parameter in Thomson Reuters FATCH before 5.2, which allows malicious users to upload arbitrary PHP files to the web root and execute system commands.

Ссылки

http://packetstormsecurity.com/files/133003/Thomson-Reuters-FATCA-Arbitrary-File-Upload.html
Third Party Advisory
VDB Entry
http://seclists.org/fulldisclosure/2015/Aug/25
Mailing List
Third Party Advisory
http://www.securityfocus.com/archive/1/536163/100/0/threaded
Third Party Advisory
VDB Entry
http://www.securityfocus.com/bid/76271
Third Party Advisory
VDB Entry
https://seclists.org/bugtraq/2015/Aug/32
Mailing List
Third Party Advisory
http://packetstormsecurity.com/files/133003/Thomson-Reuters-FATCA-Arbitrary-File-Upload.html
Third Party Advisory
VDB Entry
http://seclists.org/fulldisclosure/2015/Aug/25
Mailing List
Third Party Advisory
http://www.securityfocus.com/archive/1/536163/100/0/threaded
Third Party Advisory
VDB Entry
http://www.securityfocus.com/bid/76271
Third Party Advisory
VDB Entry
https://seclists.org/bugtraq/2015/Aug/32
Mailing List
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:thomsonreuters:fatca:*:*:*:*:*:*:*:*

Версия до 5.2 (исключая)

EPSS

Процентиль: 86%

0.03066

Низкий

9.9 Critical

CVSS3

9 Critical

CVSS2

Дефекты

CWE-434

Связанные уязвимости

GHSA-mgwr-4fqc-qh76

github

больше 3 лет назад