PT-2022-18390
CVE-2022-27352
·
تاريخ النشر
2022-04-08
·
تاريخ التحديث
2022-04-14
الوصف من
CVSS 3.1
8.8
عاليةالمقاييسAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Simple House Rental System version v1
Description
The issue allows attackers to execute arbitrary code via a crafted PHP file, exploiting an arbitrary file upload vulnerability. This is possible through the "/app/register.php" API endpoint.
Recommendations
For Simple House Rental System version v1, consider disabling the file upload functionality in the /app/register.php endpoint until a patch is available to prevent exploitation. Restrict access to this endpoint to minimize the risk of arbitrary code execution.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾