Lucene search
+L

9 matches found

RedhatCVE
RedhatCVE
•added 2025/05/22 3:39 p.m.•11 views

CVE-2020-5505

Freelancy v1.0.0 allows remote command execution via the "file":"data:application/x-php;base64 substring in conjunction with "type":"application/x-php" to the /api/files/ URI...

9.8CVSS7.3AI score0.4432EPSS
SaveExploits2References1
OSV
OSV
•added 2020/01/14 7:15 p.m.•14 views

CVE-2020-5505

Freelancy v1.0.0 allows remote command execution via the "file":"data:application/x-php;base64 substring in conjunction with "type":"application/x-php" to the /api/files/ URI...

9.8CVSS7.4AI score0.4432EPSS
SaveExploits2References1
NVD
NVD
•added 2020/01/14 7:15 p.m.•20 views

CVE-2020-5505

Freelancy v1.0.0 allows remote command execution via the "file":"data:application/x-php;base64 substring in conjunction with "type":"application/x-php" to the /api/files/ URI...

9.8CVSS9.7AI score0.4432EPSS
SaveExploits2References1
attackerkb
attackerkb
•added 2020/01/14 7:15 p.m.•10 views

CVE-2020-5505

Freelancy v1.0.0 allows remote command execution via the "file":"data:application/x-php;base64 substring in conjunction with "type":"application/x-php" to the /api/files/ URI...

9.8CVSS8.8AI score0.4432EPSS
SaveExploits2References2
CVE
CVE
•added 2020/01/14 6:08 p.m.•52 views

CVE-2020-5505

CVE-2020-5505 affects Freelancy v1.0.0, enabling remote command execution via a crafted request to /api/files/ that injects a data:application/x-php;base64 substring in conjunction with

9.8CVSS9.5AI score0.4432EPSS
SaveExploits2References1Affected Software1
Cvelist
Cvelist
•added 2020/01/14 6:08 p.m.•27 views

CVE-2020-5505

Freelancy v1.0.0 allows remote command execution via the "file":"data:application/x-php;base64 substring in conjunction with "type":"application/x-php" to the /api/files/ URI...

9.7AI score0.4432EPSS
SaveExploits2References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/01/14 12:00 a.m.•3 views

CVE-2020-5505: Improper Neutralization of Special Elements used in an OS Command

Freelancy v1.0.0 allows remote command execution via the "file":"data:application/x-php;base64 substring in conjunction with "type":"application/x-php" to the /api/files/ URI...

9.8CVSS8.4AI score0.4432EPSS
SaveExploits2References2
CNVD
CNVD
•added 2020/01/14 12:00 a.m.•7 views

Freelancy Remote Code Execution Vulnerability

Freelancy is a time tracking application for recording time spent on tasks that require billing clients by the hour. Freelancy suffers from a remote code execution vulnerability that can be exploited by an attacker to execute arbitrary code remotely, perform unauthorized operations, cause a denia...

9.8CVSS8.6AI score0.4432EPSS
SaveExploits2References1
Packet Storm
Packet Storm
•added 2020/01/13 12:00 a.m.•170 views

Freelancy 1.0.0 Remote Code Execution

Exploit Title: Freelancy - Freelance Management App v1.0.0 - RCE Authenticated Arbitrary File Download Date: 03-01-2019 Exploit Author: Ismail Tasdelen Vendor Homepage: https://vaaip.com/ Software Link: https://codecanyon.net/item/freelancy-freelance-project-management-application/25288636...

9.7AI score0.4432EPSS
SaveExploits2
Rows per page
Query Builder