9.9
CVE-2015-5951
- EPSS 3.07%
- Veröffentlicht 06.01.2020 21:15:11
- Zuletzt bearbeitet 21.11.2024 02:34:11
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
LoginA file upload issue exists in the specid parameter in Thomson Reuters FATCH before 5.2, which allows malicious users to upload arbitrary PHP files to the web root and execute system commands.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Thomsonreuters ≫ Fatca Version < 5.2
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 3.07% | 0.855 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 9.9 | 3.1 | 6 |
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
|
| nvd@nist.gov | 9 | 8 | 10 |
AV:N/AC:L/Au:S/C:C/I:C/A:C
|
CWE-434 Unrestricted Upload of File with Dangerous Type
The product allows the upload or transfer of dangerous file types that are automatically processed within its environment.