CVE-2023-44061

2023-10-0600:00:00

mitre

www.cve.org

file upload

shopping cart

remote attack

arbitrary code

edit profile.

AI Score

9.1

Confidence

High

EPSS

0.002

Percentile

52.6%

JSON

File Upload vulnerability in Simple and Nice Shopping Cart Script v.1.0 allows a remote attacker to execute arbitrary code via the upload function in the edit profile component.

References

github.com/soundarkutty/File-upload-Restriction-bypass/blob/main/poc.md