A Remote Code Execution RCE vulnerability exists in Croogo 3.0.2via admin/file-manager/attachments, which lets a malicoius user upload a web shell script...
6.5CVSS8.9AI score0.08963EPSS
SaveExploits1References1Affected Software1
NVD•added 2019/01/29 6:29 p.m.•27 views
CVE-2019-7173
A stored-self XSS exists in Croogo through v3.0.5, allowing an attacker to execute HTML or JavaScript code in a vulnerable Title field to /admin/file-manager/attachments/edit/4...
