Описание
Zenario CMS 9.0.54156 is vulnerable to File Upload. The web server can be compromised by uploading and executing a web-shell which can run commands, browse system files, browse local resources, attack other servers, and exploit the local vulnerabilities, and so forth.
Ссылки
- ExploitThird Party Advisory
- ExploitIssue TrackingThird Party Advisory
- Third Party Advisory
- ExploitThird Party Advisory
- ExploitIssue TrackingThird Party Advisory
- Third Party Advisory
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:tribalsystems:zenario:9.0.54156:*:*:*:*:*:*:*
EPSS
Процентиль: 95%
0.17813
Средний
7.2 High
CVSS3
6.5 Medium
CVSS2
Дефекты
CWE-434
Связанные уязвимости
CVSS3: 9.8
github
почти 4 года назад
Unrestricted Upload of File with Dangerous Type in Zenario CMS
EPSS
Процентиль: 95%
0.17813
Средний
7.2 High
CVSS3
6.5 Medium
CVSS2
Дефекты
CWE-434