6.8

CVE-2013-3590

Unrestricted file upload vulnerability in admin/uploadImage.html in SearchBlox before 7.5 build 1 allows remote attackers to execute arbitrary code by uploading an executable file with the image/jpeg content type, and then accessing this file via unspecified vectors, as demonstrated by access to a JSP file.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Searchblox ≫ Searchblox Version <= 7.5
Searchblox ≫ Searchblox Version6.2 Updatebuild_1
Searchblox ≫ Searchblox Version6.3 Updatebuild_1
Searchblox ≫ Searchblox Version6.4 Updatebuild_1
Searchblox ≫ Searchblox Version6.4 Updatebuild_2
Searchblox ≫ Searchblox Version7.0
Searchblox ≫ Searchblox Version7.1
Searchblox ≫ Searchblox Version7.2
Searchblox ≫ Searchblox Version7.3
Searchblox ≫ Searchblox Version7.4
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 3.76% 0.876
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 6.8 8.6 6.4
AV:N/AC:M/Au:N/C:P/I:P/A:P
Es wurden noch keine Informationen zu CWE veröffentlicht.