Lucene search
+L

4 matches found

OSV
OSV
•added 2019/03/06 12:29 a.m.•15 views

CVE-2019-9581

phpscheduleit Booked Scheduler 2.7.5 allows arbitrary file upload via the Favicon field, leading to execution of arbitrary Web/custom-favicon.php PHP code, because Presenters/Admin/ManageThemePresenter.php does not ensure an image file extension...

8.8CVSS7.5AI score0.1349EPSS
SaveExploits5References4
NVD
NVD
•added 2019/03/06 12:29 a.m.•31 views

CVE-2019-9581

phpscheduleit Booked Scheduler 2.7.5 allows arbitrary file upload via the Favicon field, leading to execution of arbitrary Web/custom-favicon.php PHP code, because Presenters/Admin/ManageThemePresenter.php does not ensure an image file extension...

8.8CVSS8.9AI score0.1349EPSS
SaveExploits5References4
Prion
Prion
•added 2019/03/06 12:29 a.m.•22 views

Default credentials

phpscheduleit Booked Scheduler 2.7.5 allows arbitrary file upload via the Favicon field, leading to execution of arbitrary Web/custom-favicon.php PHP code, because Presenters/Admin/ManageThemePresenter.php does not ensure an image file extension...

6.5CVSS8.8AI score0.1349EPSS
SaveExploits5References4Affected Software1
Cvelist
Cvelist
•added 2019/03/06 12:00 a.m.•42 views

CVE-2019-9581

phpscheduleit Booked Scheduler 2.7.5 allows arbitrary file upload via the Favicon field, leading to execution of arbitrary Web/custom-favicon.php PHP code, because Presenters/Admin/ManageThemePresenter.php does not ensure an image file extension...

8.9AI score0.1349EPSS
SaveExploits5References4
Rows per page
Query Builder