Описание
A vulnerability, which was classified as problematic, was found in ECshop up to 4.1.8. This affects an unknown part of the component New Product Handler. The manipulation leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-222357 was assigned to this vulnerability.
Ссылки
- Broken Link
- Third Party AdvisoryVDB Entry
- Third Party AdvisoryVDB Entry
- Broken Link
- Third Party AdvisoryVDB Entry
- Third Party AdvisoryVDB Entry
Уязвимые конфигурации
EPSS
4.7 Medium
CVSS3
8.8 High
CVSS3
5.8 Medium
CVSS2
Дефекты
Связанные уязвимости
A vulnerability, which was classified as problematic, was found in ECshop up to 4.1.8. This affects an unknown part of the component New Product Handler. The manipulation leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-222357 was assigned to this vulnerability.
Уязвимость компонента New Product Handler системы торговых центров электронной коммерции ECShop, позволяющая нарушителю загружать произвольные файлы
EPSS
4.7 Medium
CVSS3
8.8 High
CVSS3
5.8 Medium
CVSS2