exploitDog

CVE-2023-42331

Опубликовано: 20 сент. 2023

Источник: nvd

CVSS3: 8.8

EPSS Низкий

Описание

A file upload vulnerability in EliteCMS v1.01 allows a remote attacker to execute arbitrary code via the manage_uploads.php component.

Ссылки

https://github.com/Num-Nine/CVE/issues/2
Exploit
Issue Tracking
Third Party Advisory
https://github.com/Num-Nine/CVE/issues/4
Exploit
Issue Tracking
Third Party Advisory
https://github.com/Num-Nine/CVE/wiki/Any-file-is-uploaded-to-eliteCMS1.01
Exploit
https://github.com/Num-Nine/CVE/issues/2
Exploit
Issue Tracking
Third Party Advisory
https://github.com/Num-Nine/CVE/issues/4
Exploit
Issue Tracking
Third Party Advisory
https://github.com/Num-Nine/CVE/wiki/Any-file-is-uploaded-to-eliteCMS1.01
Exploit

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:elitecms:elite_cms:1.01:*:*:*:-:*:*:*

EPSS

Процентиль: 77%

0.01086

Низкий

8.8 High

CVSS3

Дефекты

CWE-434

Связанные уязвимости

GHSA-h6gm-gj2c-56ch

CVSS3: 8.8

github

больше 2 лет назад

A file upload vulnerability in EliteCMS 1.01 allows a remote attacker to execute arbitrary code via the manage_uploads.php component.

EPSS

Процентиль: 77%

0.01086

Низкий

8.8 High

CVSS3

Дефекты

CWE-434