Lucene search
Veracode Vulnerability DatabaseVERACODE:34609HistoryMar 11, 2022 - 9:07 a.m.
Arbitrary File Upload
2022-03-1109:07:00
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
14
croogo
file upload
arbitrary
vulnerability
EPSS
0.011
Percentile
84.7%
croogo/croogo is vulnerable to arbitrary file upload. The vulnerability exists when uploading a php file via /croogo/admin/file-manager/attachments/add which allows a malicious user to perform unwanted file uploads.
Related
cvelist
cvelist
CVE-2021-44673
2022-03-10 18:04:16
prion
prion
Remote code execution
2022-03-10 18:15:00
osv
osv
CVE-2021-44673
2022-03-10 18:15:07
Unrestricted Upload of File with Dangerous Type in Croogo
2022-03-11 00:02:02
github
github
Unrestricted Upload of File with Dangerous Type in Croogo
2022-03-11 00:02:02
nvd
nvd
CVE-2021-44673
2022-03-10 18:15:07
cve
cve
CVE-2021-44673
2022-03-10 18:15:07
exploitdb
exploitdb
Croogo 3.0.2 - Remote Code Execution (Authenticated)
2021-12-06 00:00:00