PT-2017-5002
CVE-2011-4334
·
تاريخ النشر
2017-10-23
·
تاريخ التحديث
2017-10-25
الوصف من
CVSS 2.0
6.5
متوسطةالمقاييسAV:N/AC:L/Au:S/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions:
LabWiki versions 1.1 and earlier
Description:
The issue concerns the improper verification of uploaded user files in edit.php, allowing remote authenticated users to upload arbitrary PHP files. This can be achieved by uploading a PHP file with a .gif extension using the
userfile parameter.Recommendations:
For LabWiki versions 1.1 and earlier, as a temporary workaround, consider restricting access to the
edit.php file until a proper fix is applied, and avoid using the userfile parameter to upload files. At the moment, there is no information about a newer version that contains a fix for this vulnerability.قابلية الاستغلال
استغلال
التأثيرات
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾