← Volver a CVEs
CVE-2023-1303
MEDIUM6.3
Descripcion
A vulnerability was found in UCMS 1.6 and classified as critical. This issue affects some unknown processing of the file sadmin/fileedit.php of the component System File Management Module. The manipulation of the argument file leads to unrestricted upload. The attack may be initiated remotely. The associated identifier of this vulnerability is VDB-222683.
Detalles CVE
Puntuacion CVSS v3.16.3
SeveridadMEDIUM
Vector CVSSCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Vector de ataqueNETWORK
ComplejidadLOW
Privilegios requeridosLOW
Interaccion usuarioNONE
Publicado3/9/2023
Ultima modificacion11/21/2024
Fuentenvd
Avistamientos honeypot0
Productos afectados
ucms_project:ucms
Debilidades (CWE)
CWE-434
Referencias
https://github.com/yztale/taley/blob/main/README.md(cna@vuldb.com)
https://vuldb.com/?ctiid.222683(cna@vuldb.com)
https://vuldb.com/?id.222683(cna@vuldb.com)
https://github.com/yztale/taley/blob/main/README.md(af854a3a-2127-422b-91ae-364da2661108)
https://vuldb.com/?ctiid.222683(af854a3a-2127-422b-91ae-364da2661108)
https://vuldb.com/?id.222683(af854a3a-2127-422b-91ae-364da2661108)
Correlaciones IOC
Sin correlaciones registradas
This product uses data from the NVD API but is not endorsed or certified by the NVD.