PT-2026-94834 · Danielbrendel+1 · Hortusfox-Web
CVSS v4.0
8.6
عالية
| المتجه | AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N |
Name of the Vulnerable Software and Affected Versions
HortusFox-Web versions prior to 6.1
Description
Authenticated administrators can execute arbitrary operating system commands as the web server user by abusing the Import/Export functionality. This feature, designed for data portability, can be leveraged to deploy and execute malicious code on the application server host.
Recommendations
Update to version 6.1 or later.
استغلال
إصلاح
Unrestricted File Upload
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾
تصنيف نقاط الضعف
المعرّفات ذات الصلة
المنتجات المتأثرة
Hortusfox-Web