Remote code execution

2023-10-1405:15:00

PRIOn knowledge base

www.prio-n.com

remote code execution

qdpm 9.2

edit project

uploads uri

nvd

9.7 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

70.6%

qdPM 9.2 allows remote code execution by using the Add Attachments feature of Edit Project to upload a .php file to the /uploads URI.

CPENameOperatorVersion
qdpmeq9.2

CPE	Name	Operator	Version
	qdpm	eq	9.2

References

github.com/SunshineOtaku/Report-CVE/blob/main/qdPM/9.2/RCE.md

qdpm.net