Описание
A vulnerability was found in itsourcecode Online Bookstore 1.0. It has been rated as critical. This issue affects some unknown processing of the file admin_add.php. The manipulation of the argument image leads to unrestricted upload. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
Ссылки
- ExploitThird Party Advisory
- Product
- Permissions RequiredThird Party AdvisoryVDB Entry
- Third Party AdvisoryVDB Entry
- Third Party AdvisoryVDB Entry
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:angeljudesuarez:online_book_store_project:1.0:*:*:*:*:*:*:*
EPSS
Процентиль: 27%
0.00095
Низкий
6.3 Medium
CVSS3
6.5 Medium
CVSS2
Дефекты
CWE-434
EPSS
Процентиль: 27%
0.00095
Низкий
6.3 Medium
CVSS3
6.5 Medium
CVSS2
Дефекты
CWE-434