Lucene search
+L

3 matches found

Mend
Mend
•added 2021/09/08 8:18 p.m.•7 views

CVE-2021-36440

Unrestricted File Upload in ShowDoc v2.9.5 allows remote attackers to execute arbitrary code via the 'fileurl' parameter in the component AdminUpdateController.class.php'...

9.8CVSS0.04762EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/09/08 12:00 a.m.•7 views

CVE-2021-36440: Unrestricted Upload of File with Dangerous Type

Unrestricted File Upload in ShowDoc v2.9.5 allows remote attackers to execute arbitrary code via the 'fileurl' parameter in the component AdminUpdateController.class.php'...

9.8CVSS6.4AI score0.04762EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2021/09/08 12:00 a.m.•4 views

PT-2021-21270

Name of the Vulnerable Software and Affected Versions ShowDoc version 2.9.5 Description The issue allows remote attackers to execute arbitrary code via the file url parameter in the AdminUpdateController.class.php component. This enables attackers to upload files without restrictions, potentially...

9.8CVSS0.04762EPSS
SaveExploits1References7
Rows per page
Query Builder