SP Project & Document Manager <2 4.22 - Authenticated Shell Upload
30Vexday Risk Score
Corrija em breve. Ela tem exploit funcional público.
ssvc Attendepss 54%
da publicação à arma0 dias
Publicada no NVD14 de jun.
metasploit14 de jun.
probabilidade de exploração
54%top 1% das CVEs
exploração observada
nãonenhuma fonte reporta
The SP Project & Document Manager WordPress plugin before 4.22 allows users to upload files, however, the plugin attempts to prevent php and other similar files that could be executed on the server from being uploaded by checking the file extension. It was discovered that php files could still be uploaded by changing the file extension's case, for example, from "php" to "pHP".
Produtos afetados
Unknown · SP Project & Document Manager