Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2023-09605
HistoryFeb 10, 2023 - 12:00 a.m.

Portfolio CMS Competition Conditions Vulnerability

2023-02-1000:00:00
China National Vulnerability Database
www.cnvd.org.cn
13
portfoliocms
bootstrap
vulnerability
competitive condition
remote attacker
arbitrary code

0.004 Low

EPSS

Percentile

72.8%

portfolioCMS is a Bootstrap portfolio website with an administration panel. portfolioCMS version 1.0.0 is vulnerable to a competitive condition. A remote attacker can execute arbitrary code via the fileExt parameter in localhost/admin/uploads.php.

CPENameOperatorVersion
portfoliocms portfoliocmseq1.0

0.004 Low

EPSS

Percentile

72.8%

Related for CNVD-2023-09605