CVE-2020-25763

Опубликовано: 30 сент. 2020

Источник: nvd

CVSS3: 9.8

CVSS2: 7.5

EPSS Средний

Описание

Seat Reservation System version 1.0 suffers from an Unauthenticated File Upload Vulnerability allowing Remote Attackers to gain Remote Code Execution (RCE) on the Hosting Webserver via uploading PHP files.

Ссылки

http://packetstormsecurity.com/files/159260/Seat-Reservation-System-1.0-Shell-Upload.html
Exploit
Third Party Advisory
VDB Entry
http://seclists.org/fulldisclosure/2020/Sep/41
Exploit
Mailing List
Third Party Advisory
https://packetstormsecurity.com/files/author/15149
Third Party Advisory
VDB Entry
http://packetstormsecurity.com/files/159260/Seat-Reservation-System-1.0-Shell-Upload.html
Exploit
Third Party Advisory
VDB Entry
http://seclists.org/fulldisclosure/2020/Sep/41
Exploit
Mailing List
Third Party Advisory
https://packetstormsecurity.com/files/author/15149
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:seat_reservation_system_project:seat_reservation_system:1.0:*:*:*:*:*:*:*

EPSS

Процентиль: 94%

0.12349

Средний

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-434

Связанные уязвимости

GHSA-rx2w-m3fv-4jgc

github

больше 3 лет назад