PT-2009-2371
CVE-2008-6902
·
تاريخ النشر
2009-08-06
·
تاريخ التحديث
2017-09-29
الوصف من
CVSS 2.0
6.8
متوسطةالمقاييسAV:N/AC:M/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions:
2532|Gigs version 1.2.2
Description:
The issue allows remote attackers to execute arbitrary code by uploading a file with an executable extension to the
upload flyer.php file, and then accessing it via a direct request to the file in flyers/.Recommendations:
For version 1.2.2, consider restricting access to the
upload flyer.php file to prevent unauthorized file uploads until a patch is available. Additionally, restrict access to the flyers/ directory to minimize the risk of exploitation.قابلية الاستغلال
استغلال
إصلاح
التأثيرات
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾