Lucene search
MitreCVELIST:CVE-2019-17536HistoryOct 13, 2019 - 5:52 p.m.
CVE-2019-17536
2019-10-1317:52:39
mitre
www.cve.org
1
CVSS3
9.9
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
LOW
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L
AI Score
5.1
Confidence
High
EPSS
0.001
Percentile
32.0%
Gila CMS through 1.11.4 allows Unrestricted Upload of a File with a Dangerous Type via the moveAction function in core/controllers/fm.php. The attacker needs to use admin/media_upload and fm/move.
Related
prion
prion
Unrestricted file upload
2019-10-13 18:15:00
cve
cve
CVE-2019-17536
2019-10-13 18:15:10
nvd
nvd
CVE-2019-17536
2019-10-13 18:15:10
CVSS3
9.9
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
LOW
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L
AI Score
5.1
Confidence
High
EPSS
0.001
Percentile
32.0%
Related for CVELIST:CVE-2019-17536