Lucene search
HistoryJun 12, 2024 - 2:15 p.m.
CVE-2024-1659
arbitrary file upload
megabip software
unauthenticated
php code
cve-2024-1659
9.3 High
CVSS4
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/SC:N/VI:H/SI:N/VA:H/SA:N/AU:Y/U:Amber/R:I/V:D/RE:M
6.8 Medium
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
15.6%
Arbitrary File Upload vulnerability in MegaBIP software allows attacker to upload any file to the server (including a PHP code file) without an authentication. This issue affects MegaBIP software versions through 5.10.
CNA Affected
[
{
"defaultStatus": "unaffected",
"product": "MegaBIP",
"repo": "https://megabip.pl/pobierz/1",
"vendor": "Jan Syski",
"versions": [
{
"lessThanOrEqual": "5.10",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
]Related
cvelist
cvelist
CVE-2024-1659 Arbitrary File Upload in MegaBIP
2024-06-12 13:48:01
nvd
nvd
CVE-2024-1659
2024-06-12 14:15:10
9.3 High
CVSS4
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/SC:N/VI:H/SI:N/VA:H/SA:N/AU:Y/U:Amber/R:I/V:D/RE:M
6.8 Medium
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
15.6%
Related for CVE-2024-1659