Lookup for vulnerabilities affecting packages.
| Vulnerability_id | VCID-f3xx-hptt-ffh1 |
| Summary | The e-School from Ventem has a Arbitrary File Upload vulnerability, allowing unauthenticated remote attackers to upload and execute web shell backdoors, thereby enabling arbitrary code execution on the server. |
| Aliases |
|
| Fixed_packages |
|
| Affected_packages |
|
| References |
|
| Weaknesses |
| 0 |
| cwe_id |
434 |
| name |
Unrestricted Upload of File with Dangerous Type |
| description |
The product allows the attacker to upload or transfer files of dangerous types that can be automatically processed within the product's environment. |
|
|
| Exploits |
|
| Severity_range_score | 8.7 - 8.8 |
| Exploitability | null |
| Weighted_severity | null |
| Risk_score | null |
| Resource_url | http://public2.vulnerablecode.io/vulnerabilities/VCID-f3xx-hptt-ffh1 |