Логотип exploitDog
bind:CVE-2006-3158
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2006-3158

Количество 2

Количество 2

nvd логотип

CVE-2006-3158

больше 19 лет назад

index.php in Eduha Meeting does not properly restrict file extensions before permitting a file upload, which allows remote attackers to bypass security checks and upload or execute arbitrary php code via the add action.

CVSS2: 7.5
EPSS: Низкий
github логотип

GHSA-4mh4-7x7g-rjj8

почти 4 года назад

index.php in Eduha Meeting does not properly restrict file extensions before permitting a file upload, which allows remote attackers to bypass security checks and upload or execute arbitrary php code via the add action.

EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
nvd логотип
CVE-2006-3158

index.php in Eduha Meeting does not properly restrict file extensions before permitting a file upload, which allows remote attackers to bypass security checks and upload or execute arbitrary php code via the add action.

CVSS2: 7.5
5%
Низкий
больше 19 лет назад
github логотип
GHSA-4mh4-7x7g-rjj8

index.php in Eduha Meeting does not properly restrict file extensions before permitting a file upload, which allows remote attackers to bypass security checks and upload or execute arbitrary php code via the add action.

5%
Низкий
почти 4 года назад

Уязвимостей на страницу