| Titolo | Gatship Web Module >20-12-2018 - Arbitrary File Upload [CORRECTED] |
|---|
| Descrizione | Gatship Web Module >20-12-2018 suffers from a vulnerability within the "Documents" area which allows authenticated attackers to upload any file type to the server. This vulnerability is related to "uploadDocFile".
This issue has been fixed in the latest version and was discovered by Gionathan Reale |
|---|
| Fonte | ⚠️ http://www.gatship.com/ |
|---|
| Utente | GionathanReale (UID 2768) |
|---|
| Sottomissione | 08/04/2019 09:00 (7 anni fa) |
|---|
| Moderazione | 09/04/2019 08:36 (24 hours later) |
|---|
| Stato | Accettato |
|---|
| Voce VulDB | 133141 [GAT-Ship Web Module fino a 1.39 File Upload escalationi di privilegi] |
|---|
| Punti | 14 |
|---|