EUVD-2018-8840

Malware in sbrugna...

CVE-2018-17058: Unrestricted Upload of File with Dangerous Type

An issue was discovered in JABA XPress Online Shop through 2018-09-14. It contains an arbitrary file upload vulnerability in the picture-upload feature of ProductEdit.aspx. An authenticated attacker may bypass the frontend filename validation and upload an arbitrary file via FileUploader.aspx.cs ...

PT-2020-8613

Name of the Vulnerable Software and Affected Versions: JABA XPress Online Shop versions through 2018-09-14 Description: An issue was discovered in the picture-upload feature of ProductEdit.aspx, allowing an arbitrary file upload vulnerability. An authenticated attacker can bypass frontend filenam...