Lucene search
GoogleOSV:GHSA-4PWW-FQGH-36HJHistoryMar 11, 2022 - 12:02 a.m.
Unrestricted Upload of File with Dangerous Type in Croogo
2022-03-1100:02:02
Google
osv.dev
14
0.011 Low
EPSS
Percentile
84.2%
A Remote Code Execution (RCE) vulnerability exists in Croogo 3.0.2 via admin/file-manager/attachments, which lets a malicious user upload a web shell script.
Related
cvelist
cvelist
CVE-2021-44673
2022-03-10 18:04:16
osv
osv
CVE-2021-44673
2022-03-10 18:15:07
nvd
nvd
CVE-2021-44673
2022-03-10 18:15:07
prion
prion
Remote code execution
2022-03-10 18:15:00
github
github
Unrestricted Upload of File with Dangerous Type in Croogo
2022-03-11 00:02:02
cve
cve
CVE-2021-44673
2022-03-10 18:15:07
veracode
veracode
Arbitrary File Upload
2022-03-11 09:07:00