2 matches found
CVE-2018-1000619
Ovidentia version 8.4.3 and earlier contains a Unsanitized User Input vulnerability in utilit.php, babgetAddonFilePathfromTg that can result in Authenticated Remote Code Execution. This attack appear to be exploitable via The attacker must have permission to upload addons...
8.8CVSS0.02316EPSS
SaveExploits0References3
CVE-2018-1000619: Unrestricted Upload of File with Dangerous Type
Ovidentia version 8.4.3 and earlier contains a Unsanitized User Input vulnerability in utilit.php, babgetAddonFilePathfromTg that can result in Authenticated Remote Code Execution. This attack appear to be exploitable via The attacker must have permission to upload addons...
8.8CVSS7.8AI score0.02316EPSS
SaveExploits0References2
20