EUVD-2018-8840

Malware in sbrugna...

CVE-2018-17058

An issue was discovered in JABA XPress Online Shop through 2018-09-14. It contains an arbitrary file upload vulnerability in the picture-upload feature of ProductEdit.aspx. An authenticated attacker may bypass the frontend filename validation and upload an arbitrary file via FileUploader.aspx.cs ...

Design/Logic Flaw

An issue was discovered in JABA XPress Online Shop through 2018-09-14. It contains an arbitrary file upload vulnerability in the picture-upload feature of ProductEdit.aspx. An authenticated attacker may bypass the frontend filename validation and upload an arbitrary file via FileUploader.aspx.cs ...

CVE-2018-17058

An issue was discovered in JABA XPress Online Shop through 2018-09-14. It contains an arbitrary file upload vulnerability in the picture-upload feature of ProductEdit.aspx. An authenticated attacker may bypass the frontend filename validation and upload an arbitrary file via FileUploader.aspx.cs ...

CVE-2018-17058

The CVE-2018-17058 issue affects JABA XPress Online Shop (ProductEdit.aspx picture-upload feature). An authenticated attacker can bypass frontend filename validation in FileUploader.aspx.cs by supplying empty width/height parameters, enabling arbitrary file uploads via FileUploader.aspx. The uplo...

CVE-2018-17058: Unrestricted Upload of File with Dangerous Type

An issue was discovered in JABA XPress Online Shop through 2018-09-14. It contains an arbitrary file upload vulnerability in the picture-upload feature of ProductEdit.aspx. An authenticated attacker may bypass the frontend filename validation and upload an arbitrary file via FileUploader.aspx.cs ...

PT-2020-8613

Name of the Vulnerable Software and Affected Versions: JABA XPress Online Shop versions through 2018-09-14 Description: An issue was discovered in the picture-upload feature of ProductEdit.aspx, allowing an arbitrary file upload vulnerability. An authenticated attacker can bypass frontend filenam...