Lucene search
K

6 matches found

RedhatCVE
RedhatCVE
added 2025/05/22 5:36 p.m.5 views

CVE-2020-36825

UNSUPPORTED WHEN ASSIGNED DISPUTED A vulnerability has been found in cyberaz0r WebRAT up to 20191222 and classified as critical. This vulnerability affects the function downloadfile of the file Server/api.php. The manipulation of the argument name leads to unrestricted upload. The attack can be...

6.5CVSS7AI score0.00068EPSS
Exploits0
NVD
NVD
added 2024/03/24 12:15 p.m.7 views

CVE-2020-36825

UNSUPPORTED WHEN ASSIGNED DISPUTED A vulnerability has been found in cyberaz0r WebRAT up to 20191222 and classified as critical. This vulnerability affects the function downloadfile of the file Server/api.php. The manipulation of the argument name leads to unrestricted upload. The attack can be...

6.5CVSS6.5AI score0.00068EPSS
Exploits0References3
OSV
OSV
added 2024/03/24 12:15 p.m.15 views

CVE-2020-36825

A vulnerability has been found in cyberaz0r WebRAT up to 20191222 and classified as critical. This vulnerability affects the function downloadfile of the file Server/api.php. The manipulation of the argument name leads to unrestricted upload. The attack can be initiated remotely. The patch is...

7.2AI score
Exploits0References3
CVE
CVE
added 2024/03/24 12:0 p.m.93 views

CVE-2020-36825

The CVE-2020-36825 entry refers to cyberaz0r WebRAT (up to 20191222) with a flaw in Server/api.php called download_file. Manipulating the argument name (name) allows unrestricted upload, and the issue can be triggered remotely over the network. A patch is identified (0c394a795b9c10c07085361e6fcea...

6.5CVSS6.5AI score0.00068EPSS
Exploits0References3
Cvelist
Cvelist
added 2024/03/24 12:0 p.m.16 views

CVE-2020-36825 cyberaz0r WebRAT api.php download_file unrestricted upload

UNSUPPORTED WHEN ASSIGNED DISPUTED A vulnerability has been found in cyberaz0r WebRAT up to 20191222 and classified as critical. This vulnerability affects the function downloadfile of the file Server/api.php. The manipulation of the argument name leads to unrestricted upload. The attack can be...

6.5CVSS6.5AI score0.00068EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2024/03/24 12:0 a.m.3 views

PT-2024-10836 · Unknown · Cyberaz0R Webrat

Name of the Vulnerable Software and Affected Versions: cyberaz0r WebRAT up to 20191222 Description: A critical issue affects the function download file of the file Server/api.php. The manipulation of the argument name leads to unrestricted upload. The attack can be initiated remotely. The real...

6.5CVSS6.7AI score0.00068EPSS
Exploits0References9
Rows per page
Query Builder