Weaver E-Office uploadify.php unrestricted upload
75Vexday Risk Score
Corrija agora. Ela exploração observada pelo VulnCheck e tem exploit funcional público.
ssvc Actcvss 6.3epss 28%
da publicação à arma530 dias
Publicada no NVD11 de mai.
1ª PoC+530d
VulnCheck+301d
probabilidade de exploração
28%top 2% das CVEs
exploração observada
simVulnCheck
1 exploit(s) público(s)
A vulnerability was found in Weaver E-Office 9.5. It has been classified as critical. This affects an unknown part of the file /inc/jquery/uploadify/uploadify.php. The manipulation of the argument Filedata leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-228777 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Produtos afetados
Weaver · E-OfficePoCs públicas encontradas — 1
vulncheckvulncheck.com/xdb/525339f4a4banão verificado⚠ Recursos públicos, para você avaliar a exposição de sistemas que controla ou está autorizado a testar. Teste apenas com autorização.