Command injection

2018-11-2220:29:00

PRIOn knowledge base

www.prio-n.com

7.2 High

AI Score

Confidence

High

0.023 Low

EPSS

Percentile

89.7%

Logicspice FAQ Script 2.9.7 allows uploading arbitrary files, which leads to remote command execution via admin/faqs/faqimages with a .php file.

CPENameOperatorVersion
faq_scripteq2.9.7

CPE	Name	Operator	Version
	faq_script	eq	2.9.7

References

pentest.com.tr/exploits/Logicspice-FAQ-Script-2-9-7-Remote-Code-Execution.html

www.exploit-db.com/exploits/45326/