PT-2019-7555
CVE-2016-10759
·
Publicado
2019-05-24
·
Atualizado
2019-05-30
Descrição por
CVSS 3.1
9.8
CríticaMétricasAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Precurio version 2.1
Description
The issue in Precurio allows Directory Traversal, which can lead to arbitrary code execution. This is possible because the ExtendedFileManager can be used to rename the .htaccess file, thereby bypassing the restriction on .php uploads.
Recommendations
For Precurio version 2.1, consider restricting access to the ExtendedFileManager or disabling its ability to rename system files like .htaccess until a patch is available.
Explorabilidade
Exploit
Correção
Impactos
Fornecedores
Produtos afetados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾