Lucene search
+L

11 matches found

OSV
OSV
•added 2023/09/09 12:30 a.m.•65 views

GHSA-38VF-35CG-M73W Cockpit CMS arbitrary file upload vulnerability

An arbitrary file upload vulnerability in the Upload Asset function of Cockpit CMS v2.6.3 allows attackers to execute arbitrary code via uploading a crafted .shtml file...

6.1CVSS6.5AI score0.0098EPSS
SaveExploits1References3
Github Security Blog
Github Security Blog
•added 2023/09/09 12:30 a.m.•39 views

Cockpit CMS arbitrary file upload vulnerability

An arbitrary file upload vulnerability in the Upload Asset function of Cockpit CMS v2.6.3 allows attackers to execute arbitrary code via uploading a crafted .shtml file...

6.1CVSS7.8AI score0.0098EPSS
SaveExploits1References3Affected Software1
NVD
NVD
•added 2023/09/08 11:15 p.m.•39 views

CVE-2023-41564

An arbitrary file upload vulnerability in the Upload Asset function of Cockpit CMS v2.6.3 allows attackers to execute arbitrary code via uploading a crafted .shtml file...

6.1CVSS6.7AI score0.0098EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2023/09/08 11:15 p.m.•12 views

CVE-2023-41564

An arbitrary file upload vulnerability in the Upload Asset function of Cockpit CMS v2.6.3 allows attackers to execute arbitrary code via uploading a crafted .shtml file...

6.1CVSS6.8AI score0.0098EPSS
SaveExploits1References2
Prion
Prion
•added 2023/09/08 11:15 p.m.•32 views

Design/Logic Flaw

An arbitrary file upload vulnerability in the Upload Asset function of Cockpit CMS v2.6.3 allows attackers to execute arbitrary code via uploading a crafted .shtml file...

5.8CVSS6.6AI score0.0098EPSS
SaveExploits1References1Affected Software1
CNNVD
CNNVD
•added 2023/09/08 12:00 a.m.•18 views

Cockpit Code Issues Vulnerabilities

Cockpit is an interactive server management interface. A security vulnerability exists in Cockpit CMS version v2.6.3, which originates from an arbitrary file upload vulnerability in the Upload Asset feature. The vulnerability can be exploited to execute arbitrary code by uploading a .shtml file...

6.1CVSS7.8AI score0.0098EPSS
SaveExploits1References2
OSV
OSV
•added 2023/09/08 12:00 a.m.•25 views

CVE-2023-41564

An arbitrary file upload vulnerability in the Upload Asset function of Cockpit CMS v2.6.3 allows attackers to execute arbitrary code via uploading a crafted .shtml file...

8AI score
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2023/09/08 12:00 a.m.•20 views

CVE-2023-41564

An arbitrary file upload vulnerability in the Upload Asset function of Cockpit CMS v2.6.3 allows attackers to execute arbitrary code via uploading a crafted .shtml file...

7.6AI score0.0098EPSS
SaveExploits1References1
Mend
Mend
•added 2023/09/08 12:00 a.m.•1 views

CVE-2023-41564

An arbitrary file upload vulnerability in the Upload Asset function of Cockpit CMS v2.6.3 allows attackers to execute arbitrary code via uploading a crafted .shtml file...

6.1CVSS0.0098EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/09/08 12:00 a.m.•1 views

CVE-2023-41564: Unrestricted Upload of File with Dangerous Type

An arbitrary file upload vulnerability in the Upload Asset function of Cockpit CMS v2.6.3 allows attackers to execute arbitrary code via uploading a crafted .shtml file...

6.1CVSS6.9AI score0.0098EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2023/09/08 12:00 a.m.•3 views

PT-2023-27981

Name of the Vulnerable Software and Affected Versions Cockpit CMS version 2.6.3 Description An arbitrary file upload vulnerability in the Upload Asset function allows attackers to execute arbitrary code via uploading a crafted .shtml file. Recommendations For Cockpit CMS version 2.6.3, consider...

6.1CVSS6.8AI score0.0098EPSS
SaveExploits1References8
Rows per page
Query Builder