PT-2018-14995
CVE-2018-19550
·
تاريخ النشر
2018-11-26
·
تاريخ التحديث
2019-05-23
الوصف من
CVSS 3.1
8.8
عاليةالمقاييسAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Interspire Email Marketer versions through 6.1.6
Description
The issue allows for arbitrary file upload through a "create survey and submit survey" operation in surveys submit.php. This can result in a .php file being accessible under an admin/temp/surveys/ URI.
Recommendations
For versions through 6.1.6, as a temporary workaround, consider restricting access to the surveys submit.php file until a patch is available. Avoid using the "create survey and submit survey" operation in surveys submit.php to minimize the risk of exploitation.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾