CVE-2015-3884
23Vexday Risk Score
Corrija em breve. Ela tem exploit funcional público.
ssvc Attendepss 14%
da publicação à arma0 dias
Publicada no NVD17 de mar.
metasploit14 de jun.
probabilidade de exploração
14%top 4% das CVEs
exploração observada
nãonenhuma fonte reporta
Unrestricted file upload vulnerability in the (1) myAccount, (2) projects, (3) tasks, (4) tickets, (5) discussions, (6) reports, and (7) scheduler pages in qdPM 8.3 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in uploads/attachments/ or uploads/users/.
Produtos afetados
n/a · n/a