Описание
There is a PHP code upload vulnerability in WeaselCMS 0.3.6 via index.php because code can be embedded at the end of a .png file when the image/png content type is used.
Ссылки
- ExploitThird Party Advisory
- ExploitThird Party Advisory
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:weaselcms_project:weaselcms:0.3.6:*:*:*:*:*:*:*
EPSS
Процентиль: 62%
0.00433
Низкий
9.8 Critical
CVSS3
7.5 High
CVSS2
Дефекты
CWE-434
Связанные уязвимости
CVSS3: 9.8
github
больше 3 лет назад
There is a PHP code upload vulnerability in WeaselCMS 0.3.6 via index.php because code can be embedded at the end of a .png file when the image/png content type is used.
EPSS
Процентиль: 62%
0.00433
Низкий
9.8 Critical
CVSS3
7.5 High
CVSS2
Дефекты
CWE-434