Lucene search
+L

7 matches found

RedhatCVE
RedhatCVE
•added 2025/05/22 5:36 p.m.•16 views

CVE-2020-36825

UNSUPPORTED WHEN ASSIGNED DISPUTED A vulnerability has been found in cyberaz0r WebRAT up to 20191222 and classified as critical. This vulnerability affects the function downloadfile of the file Server/api.php. The manipulation of the argument name leads to unrestricted upload. The attack can be...

6.5CVSS7AI score0.00456EPSS
SaveExploits0
OSV
OSV
•added 2024/03/24 12:15 p.m.•23 views

CVE-2020-36825

A vulnerability has been found in cyberaz0r WebRAT up to 20191222 and classified as critical. This vulnerability affects the function downloadfile of the file Server/api.php. The manipulation of the argument name leads to unrestricted upload. The attack can be initiated remotely. The patch is...

7.2AI score
SaveExploits0References3
NVD
NVD
•added 2024/03/24 12:15 p.m.•20 views

CVE-2020-36825

UNSUPPORTED WHEN ASSIGNED DISPUTED A vulnerability has been found in cyberaz0r WebRAT up to 20191222 and classified as critical. This vulnerability affects the function downloadfile of the file Server/api.php. The manipulation of the argument name leads to unrestricted upload. The attack can be...

6.5CVSS6.5AI score0.00456EPSS
SaveExploits0References3
CVE
CVE
•added 2024/03/24 12:00 p.m.•116 views

CVE-2020-36825

The CVE-2020-36825 entry refers to cyberaz0r WebRAT (up to 20191222) with a flaw in Server/api.php called download_file. Manipulating the argument name (name) allows unrestricted upload, and the issue can be triggered remotely over the network. A patch is identified (0c394a795b9c10c07085361e6fcea...

6.5CVSS6.5AI score0.00456EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2024/03/24 12:00 p.m.•33 views

CVE-2020-36825 cyberaz0r WebRAT api.php download_file unrestricted upload

UNSUPPORTED WHEN ASSIGNED DISPUTED A vulnerability has been found in cyberaz0r WebRAT up to 20191222 and classified as critical. This vulnerability affects the function downloadfile of the file Server/api.php. The manipulation of the argument name leads to unrestricted upload. The attack can be...

6.5CVSS6.5AI score0.00456EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2024/03/24 12:00 a.m.•12 views

PT-2024-10836 · Unknown · Cyberaz0R Webrat

Name of the Vulnerable Software and Affected Versions: cyberaz0r WebRAT up to 20191222 Description: A critical issue affects the function download file of the file Server/api.php. The manipulation of the argument name leads to unrestricted upload. The attack can be initiated remotely. The real...

6.5CVSS6.7AI score0.00456EPSS
SaveExploits0References9
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/03/24 12:00 a.m.•1 views

CVE-2020-36825: Unrestricted Upload of File with Dangerous Type

UNSUPPORTED WHEN ASSIGNED DISPUTED A vulnerability has been found in cyberaz0r WebRAT up to 20191222 and classified as critical. This vulnerability affects the function downloadfile of the file Server/api.php. The manipulation of the argument name leads to unrestricted upload. The attack can be...

6.5CVSS5.1AI score0.00456EPSS
SaveExploits0References2
Rows per page
Query Builder