| 标题 | Gatship Web Module >20-12-2018 - Arbitrary File Upload [CORRECTED] |
|---|
| 描述 | Gatship Web Module >20-12-2018 suffers from a vulnerability within the "Documents" area which allows authenticated attackers to upload any file type to the server. This vulnerability is related to "uploadDocFile".
This issue has been fixed in the latest version and was discovered by Gionathan Reale |
|---|
| 来源 | ⚠️ http://www.gatship.com/ |
|---|
| 用户 | GionathanReale (UID 2768) |
|---|
| 提交 | 2019-04-08 09時00分 (7 年前) |
|---|
| 管理 | 2019-04-09 08時36分 (24 hours later) |
|---|
| 状态 | 已接受 |
|---|
| VulDB条目 | 133141 [GAT-Ship Web Module 直到 1.39 File Upload 权限提升] |
|---|
| 积分 | 14 |
|---|