Lucene search
PRIOn knowledge basePRION:CVE-2021-45887HistoryMar 13, 2022 - 2:15 a.m.
Path traversal
2022-03-1302:15:00
PRIOn knowledge base
www.prio-n.com
1
An issue was discovered in PONTON X/P Messenger before 3.11.2. Due to path traversal in private/SchemaSetUpload.do for uploaded ZIP files, an executable script can be uploaded by web application administrators, giving the attacker remote code execution on the underlying server via an imgs/*.jsp URI.
| CPE | Name | Operator | Version |
|---|---|---|---|
| x\\/p_messenger | eq | 3.10.0 | |
| x\\/p_messenger | eq | 3.8.0 |
Related
nvd
nvd
CVE-2021-45887
2022-03-13 02:15:07
cvelist
cvelist
CVE-2021-45887
2022-03-13 01:34:54
cve
cve
CVE-2021-45887
2022-03-13 02:15:07