PT-2023-11503 · Unknown · Semcms Php

CVE-2020-18432

·

Publicado

2023-06-30

·

Atualizado

2023-07-07

CVSS v3.1

9.8

Crítica

VetorAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions SEMCMS PHP version 3.7
Description The issue allows remote attackers to upload arbitrary files and gain escalated privileges.
Recommendations For SEMCMS PHP version 3.7, update to a version that fixes the file upload issue to prevent remote attackers from uploading arbitrary files and gaining escalated privileges.

Correção

Unrestricted File Upload

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-434

Identificadores relacionados

CVE-2020-18432
GHSA-HG72-F8X2-CHJH

Produtos afetados

Semcms Php