PT-2020-7112
CVE-2011-2933
·
تاريخ النشر
2020-01-14
·
تاريخ التحديث
2020-01-21
الوصف من
CVSS 2.0
6.5
متوسطةالمقاييسAV:N/AC:L/Au:S/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions
WebsiteBaker versions 2.8.1 and earlier
Description
An Arbitrary File Upload issue exists due to a failure to restrict uploaded files with certain extensions, such as
.htaccess, .php4, .php5, and .phtl. This issue is related to the admin/media/upload.php file.Recommendations
For versions 2.8.1 and earlier, restrict the upload of files with
.htaccess, .php4, .php5, and .phtl extensions in the admin/media/upload.php file to prevent arbitrary file uploads.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.قابلية الاستغلال
استغلال
التأثيرات
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾