Unrestricted file upload

2020-05-2019:15:00

PRIOn knowledge base

www.prio-n.com

7.5 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

20.4%

JSON

Microweber 1.1.18 allows Unrestricted File Upload because admin/view:modules/load_module:users#edit-user=1 does not verify that the file extension (used with the Add Image option on the Edit User screen) corresponds to an image file.

CPENameOperatorVersion
microwebereq1.1.18

CPE	Name	Operator	Version
	microweber	eq	1.1.18

References

gist.github.com/virendratiwari03/0af29841fdf27207eb3abc8f28d326f3