Lucene search
+L

3 matches found

osv_cve
osv_cve
•added 2024/04/12 2:15 p.m.•14 views

CVE-2024-3705

Unrestricted file upload vulnerability in OpenGnsys affecting version 1.1.1d Espeto. This vulnerability allows an attacker to send a POST request to the endpoint '/opengnsys/images/MIcons.php' modifying the file extension, due to lack of file extension verification, resulting in a webshell...

8.8CVSS5.8AI score0.00765EPSS
SaveExploits0References2
Mend
Mend
•added 2024/04/12 1:50 p.m.•5 views

CVE-2024-3705

Unrestricted file upload vulnerability in OpenGnsys affecting version 1.1.1d Espeto. This vulnerability allows an attacker to send a POST request to the endpoint '/opengnsys/images/MIcons.php' modifying the file extension, due to lack of file extension verification, resulting in a webshell...

8.8CVSS0.00765EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/12 12:00 a.m.•8 views

CVE-2024-3705: Unrestricted Upload of File with Dangerous Type

Unrestricted file upload vulnerability in OpenGnsys affecting version 1.1.1d Espeto. This vulnerability allows an attacker to send a POST request to the endpoint '/opengnsys/images/MIcons.php' modifying the file extension, due to lack of file extension verification, resulting in a webshell...

8.8CVSS5.9AI score0.00765EPSS
SaveExploits0References2
Rows per page
Query Builder