exploitDog

CVE-2023-34855

Опубликовано: 12 июн. 2023

Источник: nvd

CVSS3: 4.8

EPSS Низкий

Описание

A Cross Site Scripting (XSS) vulnerability in Youxun Electronic Equipment (Shanghai) Co., Ltd AC Centralized Management Platform v1.02.040 allows attackers to execute arbitrary code via uploading a crafted HTML file to the interface /upfile.cgi.

Ссылки

https://github.com/hashshfza/Vulnerability/issues/1
Exploit
Issue Tracking
Third Party Advisory
https://github.com/hashshfza/Vulnerability/issues/1
Exploit
Issue Tracking
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:ac_centralized_management_platform_project:ac_centralized_management_platform:1.02.040:*:*:*:*:*:*:*

EPSS

Процентиль: 20%

0.00066

Низкий

4.8 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

GHSA-fw4q-485m-jxxg

CVSS3: 4.8

github

больше 2 лет назад

A Cross Site Scripting (XSS) vulnerability in Youxun Electronic Equipment (Shanghai) Co., Ltd AC Centralized Management Platform v1.02.040 allows attackers to execute arbitrary code via uploading a crafted HTML file to the interface /upfile.cgi.

EPSS

Процентиль: 20%

0.00066

Низкий

4.8 Medium

CVSS3

Дефекты

CWE-79