Lucene search
PRIOn knowledge basePRION:CVE-2023-6887HistoryDec 17, 2023 - 1:15 a.m.
Design/Logic Flaw
2023-12-1701:15:00
PRIOn knowledge base
www.prio-n.com
1
critical vulnerability
saysky forestblog
remote attack
unrestricted upload
image upload handler
file manipulation
exploit disclosure
vdb-248247
nvd
A vulnerability classified as critical has been found in saysky ForestBlog up to 20220630. This affects an unknown part of the file /admin/upload/img of the component Image Upload Handler. The manipulation of the argument filename leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-248247.
| CPE | Name | Operator | Version |
|---|---|---|---|
| forestblog | eq | <= 2022630 |
Related
cve
cve
CVE-2023-6887
2023-12-17 01:15:27
cvelist
cvelist
CVE-2023-6887 saysky ForestBlog Image Upload img unrestricted upload
2023-12-17 00:31:04
cnvd
cnvd
ForestBlog Arbitrary File Upload Vulnerability
2023-12-19 00:00:00
nvd
nvd
CVE-2023-6887
2023-12-17 01:15:27