PT-2023-11650 · Semcms · Semcms
CVE-2020-23564
·
Publicado
2023-08-05
·
Atualizado
2023-08-09
CVSS v3.1
7.2
Alta
| Vetor | AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
SEMCMS version 3.9
Description
The issue allows remote attackers to run arbitrary code. This is achieved via the SEMCMS Upfile.php file, which is vulnerable to file upload attacks.
Recommendations
For SEMCMS version 3.9, consider disabling the SEMCMS Upfile.php file as a temporary workaround until a patch is available. Restrict access to this file to minimize the risk of exploitation.
Exploit
Correção
Unrestricted File Upload
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Semcms