3 matches found
CVE-2017-14840
TeamWork TicketPlus allows Arbitrary File Upload in updateProfile...
8.8CVSS8.7AI score0.03516EPSS
SaveExploits2References1
CVE-2017-14840
TeamWork TicketPlus allows Arbitrary File Upload in updateProfile...
8.7AI score0.03516EPSS
SaveExploits2References1
CVE-2017-14840
CVE-2017-14840 affects TeamWork TicketPlus. A vulnerability in updateProfile allows Arbitrary File Upload, enabling an attacker to upload arbitrary files via the updateProfile function. Documented impact from CVSSv3 indicates high severity (Impact: Confidentiality, Integrity, Availability all Hig...
8.8CVSS8.6AI score0.03516EPSS
SaveExploits2References1Affected Software1
20