exploitDog

CVE-2020-10228

Опубликовано: 14 сент. 2020

Источник: nvd

CVSS3: 8.8

CVSS2: 6.5

EPSS Низкий

Описание

A file upload vulnerability in vtecrm vtenext 19 CE allows authenticated users to upload files with a .pht extension, resulting in remote code execution.

Ссылки

https://sourceforge.net/projects/vtecrm/
Product
Third Party Advisory
https://vtenext.com/en/
Vendor Advisory
https://www.exploit-db.com/exploits/48804
Third Party Advisory
VDB Entry
https://sourceforge.net/projects/vtecrm/
Product
Third Party Advisory
https://vtenext.com/en/
Vendor Advisory
https://www.exploit-db.com/exploits/48804
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:vtenext:vtenext:19:*:*:*:community:*:*:*

EPSS

Процентиль: 91%

0.0681

Низкий

8.8 High

CVSS3

6.5 Medium

CVSS2

Дефекты

CWE-434

Связанные уязвимости

GHSA-h6wh-5wqm-h86w

github

больше 3 лет назад

A file upload vulnerability in vtecrm vtenext 19 CE allows authenticated users to upload files with a .pht extension, resulting in remote code execution.

EPSS

Процентиль: 91%

0.0681

Низкий

8.8 High

CVSS3

6.5 Medium

CVSS2

Дефекты

CWE-434