Описание
An arbitrary file upload vulnerability in LEPTON v7.0.0 allows authenticated attackers to execute arbitrary PHP code by uploading this code to the backend/languages/index.php languages area.
Ссылки
- Exploit
- Exploit
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:lepton-cms:leptoncms:7.0.0:*:*:*:*:*:*:*
EPSS
Процентиль: 82%
0.01742
Низкий
7.2 High
CVSS3
Дефекты
CWE-434
CWE-434
Связанные уязвимости
CVSS3: 7.2
github
около 2 лет назад
An arbitrary file upload vulnerability in LeptonCMS v7.0.0 allows authenticated attackers to execute arbitrary code via uploading a crafted PHP file.
EPSS
Процентиль: 82%
0.01742
Низкий
7.2 High
CVSS3
Дефекты
CWE-434
CWE-434