Unrestricted file upload

2023-05-1219:15:00

PRIOn knowledge base

www.prio-n.com

file upload

vulnerability

remote attacker

arbitrary code

update settings

nvd

9.6 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

71.7%

JSON

File Upload vulnerability found in Oretnom23 Storage Unit Rental Management System v.1.0 allows a remote attacker to execute arbitrary code via the update_settings parameter.

CPENameOperatorVersion
storage_unit_rental_management_systemeq1.0

CPE	Name	Operator	Version
	storage_unit_rental_management_system	eq	1.0

References

github.com/qingning988/cve_report/blob/main/storage-unit-rental-management-system/RCE-1.md

www.github.com