PT-2024-33566 · Unknown · Paxman Product Website Showcase

·

CVE-2024-49611

·

Published

2024-10-20

·

Updated

2024-10-23

CVSS v3.1

10

Critical

VectorAV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Paxman Product Website Showcase versions n/a through 1.0
Description The issue allows an unrestricted upload of files with dangerous types, enabling the upload of a web shell to a web server. This can potentially allow attackers to deploy malicious web shells to the server.
Recommendations For versions n/a through 1.0, consider disabling the file upload feature until a patch is available to prevent the upload of malicious files. Restrict access to the server to minimize the risk of exploitation. Avoid using the file upload functionality in the affected Paxman Product Website Showcase until the issue is resolved.

Fix

Unrestricted File Upload

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2024-49611

Affected Products

Paxman Product Website Showcase