Lucene search
Veracode Vulnerability DatabaseVERACODE:34323HistoryFeb 21, 2022 - 9:10 a.m.
Arbitrary File Upload
2022-02-2109:10:11
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
15
0.001 Low
EPSS
Percentile
32.1%
showdoc/showdoc is vulnerable to arbitrary file upload attacks. The vulnerability exists through AttachmentController.class.php where the attachmentUpload function does not properly validate the upload files, allowing an attacker to upload a malicious crafted file and remotely execute arbitrary code on system.
| CPE | Name | Operator | Version |
|---|---|---|---|
| showdoc/showdoc | le | v2.10.2 | |
| showdoc/showdoc | le | v2.10.2 |
Related
osv
osv
Unrestricted Upload of File with Dangerous Type in showdoc
2022-02-20 00:00:32
CVE-2022-0409
2022-02-19 05:15:14
cnvd
cnvd
showdoc code issue vulnerability
2022-02-22 00:00:00
cve
cve
CVE-2022-0409
2022-02-19 05:15:14
huntr
huntr
in star7th/showdoc
2022-01-25 04:14:29
github
github
Unrestricted Upload of File with Dangerous Type in showdoc
2022-02-20 00:00:32
prion
prion
Unrestricted file upload
2022-02-19 05:15:00
cvelist
cvelist
nvd
nvd
CVE-2022-0409
2022-02-19 05:15:14