Описание
In Sourcecodetester Printable Staff ID Card Creator System 1.0 after compromising the database via SQLi, an attacker can log in and leverage an arbitrary file upload vulnerability to obtain remote code execution.
Ссылки
- ExploitThird Party AdvisoryVDB Entry
- Third Party Advisory
- ExploitThird Party AdvisoryVDB Entry
- Third Party Advisory
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:printable_staff_id_card_creator_system_project:printable_staff_id_card_creator_system:1.0:*:*:*:*:*:*:*
EPSS
Процентиль: 87%
0.03206
Низкий
9.8 Critical
CVSS3
7.5 High
CVSS2
Дефекты
CWE-434
Связанные уязвимости
github
около 4 лет назад
In Sourcecodetester Printable Staff ID Card Creator System 1.0 after compromising the database via SQLi, an attacker can log in and leverage an arbitrary file upload vulnerability to obtain remote code execution.
EPSS
Процентиль: 87%
0.03206
Низкий
9.8 Critical
CVSS3
7.5 High
CVSS2
Дефекты
CWE-434