Lucene search
Veracode Vulnerability DatabaseVERACODE:35626HistoryMay 20, 2022 - 10:00 a.m.
Arbitrary File Upload
2022-05-2010:00:24
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
17
0.001 Low
EPSS
Percentile
37.5%
shopxo/shopxo is vulnerable to arbitrary file upload. The vulnerability exists in three locations because the upload functions are not properly restricted which allows an attacker to upload malicious files.
| CPE | Name | Operator | Version |
|---|---|---|---|
| shopxo/shopxo | eq | v2.2.0 | |
| shopxo/shopxo | eq | v2.2.0 |
Related
osv
osv
CVE-2021-41938
2022-05-19 14:15:07
Arbitrary file upload in ShopXO
2022-05-20 00:00:38
nvd
nvd
CVE-2021-41938
2022-05-19 14:15:07
cvelist
cvelist
CVE-2021-41938
2022-05-19 14:01:55
github
github
Arbitrary file upload in ShopXO
2022-05-20 00:00:38
prion
prion
Privilege escalation
2022-05-19 14:15:00
cve
cve
CVE-2021-41938
2022-05-19 14:15:07