CVE-2018-18752

2022-10-0316:22:03

mitre

www.cve.org

webiness inventory 2.3

file upload

vulnerability

php code

wssavetomodel.php

9.6 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

70.2%

JSON

Webiness Inventory 2.3 suffers from an Arbitrary File upload vulnerability via PHP code in the protected/library/ajax/WsSaveToModel.php logo parameter.

References

packetstormsecurity.com/files/149982/Webiness-Inventory-2.9-Shell-Upload.html