Lucene search
+L

11 matches found

osv_ghsa
osv_ghsa
•added 2023/09/09 12:30 a.m.•76 views

GHSA-38VF-35CG-M73W Cockpit CMS arbitrary file upload vulnerability

An arbitrary file upload vulnerability in the Upload Asset function of Cockpit CMS v2.6.3 allows attackers to execute arbitrary code via uploading a crafted .shtml file...

6.1CVSS6.5AI score0.00988EPSS
SaveExploits1References3
Github Security Blog
Github Security Blog
•added 2023/09/09 12:30 a.m.•47 views

Cockpit CMS arbitrary file upload vulnerability

An arbitrary file upload vulnerability in the Upload Asset function of Cockpit CMS v2.6.3 allows attackers to execute arbitrary code via uploading a crafted .shtml file...

6.1CVSS7.8AI score0.00988EPSS
SaveExploits1References3Affected Software1
NVD
NVD
•added 2023/09/08 11:15 p.m.•47 views

CVE-2023-41564

An arbitrary file upload vulnerability in the Upload Asset function of Cockpit CMS v2.6.3 allows attackers to execute arbitrary code via uploading a crafted .shtml file...

6.1CVSS6.7AI score0.00988EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2023/09/08 11:15 p.m.•16 views

CVE-2023-41564

An arbitrary file upload vulnerability in the Upload Asset function of Cockpit CMS v2.6.3 allows attackers to execute arbitrary code via uploading a crafted .shtml file...

6.1CVSS6.8AI score0.00988EPSS
SaveExploits1References2
Prion
Prion
•added 2023/09/08 11:15 p.m.•34 views

Design/Logic Flaw

An arbitrary file upload vulnerability in the Upload Asset function of Cockpit CMS v2.6.3 allows attackers to execute arbitrary code via uploading a crafted .shtml file...

5.8CVSS6.6AI score0.00988EPSS
SaveExploits1References1Affected Software1
osv_cve
osv_cve
•added 2023/09/08 12:00 a.m.•29 views

CVE-2023-41564

An arbitrary file upload vulnerability in the Upload Asset function of Cockpit CMS v2.6.3 allows attackers to execute arbitrary code via uploading a crafted .shtml file...

8AI score
SaveExploits0References3
CNNVD
CNNVD
•added 2023/09/08 12:00 a.m.•25 views

Cockpit Code Issues Vulnerabilities

Cockpit is an interactive server management interface. A security vulnerability exists in Cockpit CMS version v2.6.3, which originates from an arbitrary file upload vulnerability in the Upload Asset feature. The vulnerability can be exploited to execute arbitrary code by uploading a .shtml file...

6.1CVSS7.8AI score0.00988EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
•added 2023/09/08 12:00 a.m.•21 views

CVE-2023-41564

An arbitrary file upload vulnerability in the Upload Asset function of Cockpit CMS v2.6.3 allows attackers to execute arbitrary code via uploading a crafted .shtml file...

7.6AI score0.00988EPSS
SaveExploits1References1
Mend
Mend
•added 2023/09/08 12:00 a.m.•10 views

CVE-2023-41564

An arbitrary file upload vulnerability in the Upload Asset function of Cockpit CMS v2.6.3 allows attackers to execute arbitrary code via uploading a crafted .shtml file...

6.1CVSS0.00988EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
•added 2023/09/08 12:00 a.m.•8 views

PT-2023-27981

Name of the Vulnerable Software and Affected Versions Cockpit CMS version 2.6.3 Description An arbitrary file upload vulnerability in the Upload Asset function allows attackers to execute arbitrary code via uploading a crafted .shtml file. Recommendations For Cockpit CMS version 2.6.3, consider...

6.1CVSS6.8AI score0.00988EPSS
SaveExploits1References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/09/08 12:00 a.m.•5 views

CVE-2023-41564: Unrestricted Upload of File with Dangerous Type

An arbitrary file upload vulnerability in the Upload Asset function of Cockpit CMS v2.6.3 allows attackers to execute arbitrary code via uploading a crafted .shtml file...

6.1CVSS6.9AI score0.00988EPSS
SaveExploits1References2
Rows per page
Query Builder