Описание
Zomplog 3.9 contains a remote code execution vulnerability that allows authenticated attackers to inject and execute arbitrary PHP code through file manipulation endpoints. Attackers can upload malicious JavaScript files, rename them to PHP, and execute system commands by exploiting the saveE and rename actions in the application.
Ссылки
- Product
- ExploitThird Party AdvisoryVDB Entry
- Third Party AdvisoryExploit
- ExploitThird Party AdvisoryVDB Entry
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:zomp:zomplog:3.9:*:*:*:*:*:*:*
EPSS
Процентиль: 69%
0.00601
Низкий
8.8 High
CVSS3
Дефекты
CWE-94
Связанные уязвимости
CVSS3: 8.8
github
около 2 месяцев назад
Zomplog 3.9 contains a remote code execution vulnerability that allows authenticated attackers to inject and execute arbitrary PHP code through file manipulation endpoints. Attackers can upload malicious JavaScript files, rename them to PHP, and execute system commands by exploiting the saveE and rename actions in the application.
EPSS
Процентиль: 69%
0.00601
Низкий
8.8 High
CVSS3
Дефекты
CWE-94