Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2020-27397

Опубликовано: 23 дек. 2020
Источник: nvd
CVSS3: 8.8
CVSS2: 6.5
EPSS Низкий

Описание

Marital - Online Matrimonial Project In PHP version 1.0 suffers from an authenticated file upload vulnerability allowing remote attackers to gain remote code execution (RCE) on the Hosting web server via uploading a maliciously crafted PHP file.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:projectworlds:online_matrimonial_project:1.0:*:*:*:*:*:*:*

EPSS

Процентиль: 84%
0.02228
Низкий

8.8 High

CVSS3

6.5 Medium

CVSS2

Дефекты

CWE-434

Связанные уязвимости

github
больше 3 лет назад

Marital - Online Matrimonial Project In PHP version 1.0 suffers from an authenticated file upload vulnerability allowing remote attackers to gain remote code execution (RCE) on the Hosting web server via uploading a maliciously crafted PHP file.

EPSS

Процентиль: 84%
0.02228
Низкий

8.8 High

CVSS3

6.5 Medium

CVSS2

Дефекты

CWE-434