PT-2017-14255
CVE-2017-15876
·
تاريخ النشر
2017-12-18
·
تاريخ التحديث
2018-01-05
الوصف من
CVSS 2.0
9.0
عاليةالمقاييسAV:N/AC:L/Au:S/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
GPWeb version 8.4.61
Description
The issue allows remote authenticated users to upload any type of file, including a PHP shell, due to an Unrestricted File Upload vulnerability.
Recommendations
For GPWeb version 8.4.61, update to a version that addresses the Unrestricted File Upload vulnerability, or as a temporary workaround, consider restricting file upload capabilities to authorized users and validating the type of files being uploaded to prevent malicious uploads.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾