Lucene search
+L

4 matches found

NVD
NVD
•added 2025/01/07 6:15 p.m.•32 views

CVE-2024-50658

Server-Side Template Injection SSTI was found in AdPortal 3.0.39 allows a remote attacker to execute arbitrary code via the shippingAsBilling and firstname parameters in updateuserinfo.html file...

9.8CVSS0.00799EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/01/07 12:00 a.m.•33 views

CVE-2024-50658

Server-Side Template Injection SSTI was found in AdPortal 3.0.39 allows a remote attacker to execute arbitrary code via the shippingAsBilling and firstname parameters in updateuserinfo.html file...

0.00799EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/01/07 12:00 a.m.•10 views

CVE-2024-50658

Server-Side Template Injection SSTI was found in AdPortal 3.0.39 allows a remote attacker to execute arbitrary code via the shippingAsBilling and firstname parameters in updateuserinfo.html file...

8.4AI score0.00799EPSS
SaveExploits0References1
CVE
CVE
•added 2025/01/07 12:00 a.m.•83 views

CVE-2024-50658

A Server-Side Template Injection (SSTI) vulnerability exists in iPublish AdPortal version 3.0.39 . This flaw allows a remote attacker to execute arbitrary code by exploiting the shippingAsBilling and firstname parameters within the updateuserinfo.html file. As a temporary workaround, it is recomm...

9.8CVSS7.8AI score0.00799EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder