PT-2023-11510 · Unknown · Earcms Ear App
CVE-2020-18912
·
Publicado
2023-08-29
·
Atualizado
2023-08-31
CVSS v3.1
9.8
Crítica
| Vetor | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Earcms Ear App version 20181124
Description
An issue in Earcms Ear App allows a remote attacker to execute arbitrary code via the "uload/index-uplog.php" endpoint. This enables the attacker to perform unauthorized actions on the affected system.
Recommendations
For Earcms Ear App version 20181124, consider disabling access to the "uload/index-uplog.php" endpoint until a patch is available to prevent remote code execution. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Unrestricted File Upload
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Earcms Ear App