Lucene search
K

Arbitrary File Upload

🗓️ 24 May 2022 16:44:03Reported by Snyk Security DatabaseType 
snyk
 snyk
🔗 security.snyk.io👁 5 Views

Arbitrary file upload allows admin to trigger code execution via .aassp files converted to .asp.

Related
Detection
Refs
ReporterTitlePublishedViews
Family
CNVD
SiteServer CMS Arbitrary Code Execution Vulnerability
22 Apr 201900:00
cnvd
CVE
CVE-2019-11401
21 Apr 201915:37
cve
Cvelist
CVE-2019-11401
21 Apr 201915:37
cvelist
EUVD
EUVD-2022-3756
3 Oct 202520:07
euvd
Github Security Blog
SiteServer CMS RCE via unsafe file upload
24 May 202216:44
github
NVD
CVE-2019-11401
22 Apr 201911:29
nvd
OSV
GHSA-FF4W-8CHR-W2X9 SiteServer CMS RCE via unsafe file upload
24 May 202216:44
osv
Prion
Code injection
22 Apr 201911:29
prion
RedhatCVE
CVE-2019-11401
9 Jan 202610:12
redhatcve
Veracode
Arbitrary Code Execution
8 Jul 201913:38
veracode
Rows per page
Vulners
Node
sscms_projectsscmsRange06.12

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

11 Mar 2024 09:47Current
8.1High risk
Vulners AI Score8.1
CVSS 3.17.2
CVSS 37.2
CVSS 26.5
EPSS0.02331
5