Lucene search
Veracode Vulnerability DatabaseVERACODE:21640HistoryOct 07, 2019 - 2:47 a.m.
Unrestricted File Upload
2019-10-0702:47:24
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6
0.001 Low
EPSS
Percentile
39.3%
fancyecommerce/fecshop allows unrestricted file upload. Lack of validation of file uploads in services/Image.php allows an authenticated attacker to upload a file containing malicious PHP codes and perform remote code execution by browsing to the uploaded file.
| CPE | Name | Operator | Version |
|---|---|---|---|
| fancyecommerce/fecshop | le | 2.3.4 |
Related
cve
cve
CVE-2019-17188
2019-10-04 22:15:11
prion
prion
Unrestricted file upload
2019-10-04 22:15:00
osv
osv
CVE-2019-17188
2019-10-04 22:15:11
cvelist
cvelist
CVE-2019-17188
2019-10-04 21:55:46
nvd
nvd
CVE-2019-17188
2019-10-04 22:15:11