Lucene search
Veracode Vulnerability DatabaseVERACODE:47443HistoryJun 10, 2024 - 7:26 a.m.
Remote Code Execution (RCE)
2024-06-1007:26:23
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
4
remote code execution
aimeos
file upload validation
administrative privileges
web server context
7.9 High
AI Score
Confidence
Low
aimeos/aimeos-core is vulnerable to Remote Code Execution (RCE). The vulnerability is caused by improper file upload validation, allowing users with administrative privileges to upload files disguised as images but containing PHP code, which can then be executed in the context of the web server.
7.9 High
AI Score
Confidence
Low