Lucene search

K
prionPRIOn knowledge basePRION:CVE-2015-3884
HistoryMar 17, 2017 - 2:59 p.m.

Unrestricted file upload

2017-03-1714:59:00
PRIOn knowledge base
www.prio-n.com
4

8.1 High

AI Score

Confidence

Low

0.031 Low

EPSS

Percentile

91.0%

Unrestricted file upload vulnerability in the (1) myAccount, (2) projects, (3) tasks, (4) tickets, (5) discussions, (6) reports, and (7) scheduler pages in qdPM 8.3 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in uploads/attachments/ or uploads/users/.

CPENameOperatorVersion
qdpmle9.1

8.1 High

AI Score

Confidence

Low

0.031 Low

EPSS

Percentile

91.0%