5 matches found
GHSA-38VF-35CG-M73W Cockpit CMS arbitrary file upload vulnerability
An arbitrary file upload vulnerability in the Upload Asset function of Cockpit CMS v2.6.3 allows attackers to execute arbitrary code via uploading a crafted .shtml file...
6.1CVSS6.5AI score0.0096EPSS
SaveExploits1References3
CVE-2023-41564
An arbitrary file upload vulnerability in the Upload Asset function of Cockpit CMS v2.6.3 allows attackers to execute arbitrary code via uploading a crafted .shtml file...
6.1CVSS6.7AI score0.0096EPSS
SaveExploits1References1
Design/Logic Flaw
An arbitrary file upload vulnerability in the Upload Asset function of Cockpit CMS v2.6.3 allows attackers to execute arbitrary code via uploading a crafted .shtml file...
5.8CVSS6.6AI score0.0096EPSS
SaveExploits1References1Affected Software1
20