Описание
Yoga Class Registration System version 1.0 allows an administrator to execute commands on the server. This is possible because the application does not correctly validate the thumbnails of the classes uploaded by the administrators.
Ссылки
- ExploitThird Party Advisory
- Product
- ExploitThird Party Advisory
- Product
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:yoga_class_registration_system_project:yoga_class_registration_system:1.0:*:*:*:*:*:*:*
EPSS
Процентиль: 24%
0.00078
Низкий
9.1 Critical
CVSS3
7.2 High
CVSS3
Дефекты
CWE-434
CWE-434
Связанные уязвимости
CVSS3: 9.1
github
больше 2 лет назад
Yoga Class Registration System version 1.0 allows an administrator to execute commands on the server. This is possible because the application does not correctly validate the thumbnails of the classes uploaded by the administrators.
EPSS
Процентиль: 24%
0.00078
Низкий
9.1 Critical
CVSS3
7.2 High
CVSS3
Дефекты
CWE-434
CWE-434