9.8
CVE-2020-25763
- EPSS 12.35%
- Veröffentlicht 30.09.2020 18:15:25
- Zuletzt bearbeitet 21.11.2024 05:18:42
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
LoginSeat Reservation System version 1.0 suffers from an Unauthenticated File Upload Vulnerability allowing Remote Attackers to gain Remote Code Execution (RCE) on the Hosting Webserver via uploading PHP files.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Seat Reservation System Project ≫ Seat Reservation System Version1.0
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 12.35% | 0.937 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 9.8 | 3.9 | 5.9 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
|
| nvd@nist.gov | 7.5 | 10 | 6.4 |
AV:N/AC:L/Au:N/C:P/I:P/A:P
|
CWE-434 Unrestricted Upload of File with Dangerous Type
The product allows the upload or transfer of dangerous file types that are automatically processed within its environment.