GHSA-vhgr-gfx3-fg37
Suggest an improvement- Source
- https://github.com/advisories/GHSA-vhgr-gfx3-fg37
- Import Source
- https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/04/GHSA-vhgr-gfx3-fg37/GHSA-vhgr-gfx3-fg37.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/GHSA-vhgr-gfx3-fg37
- Aliases
- Published
- 2022-04-01T00:00:41Z
- Modified
- 2024-02-20T05:34:17.175877Z
- Severity
-
- 8.8 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
- Summary
- Unrestricted Upload of File with Dangerous Type in WPanel 4
- Details
-
Multiple Remote Code Execution (RCE) vulnerabilities exist in WPanel 4 4.3.1 and below via a malicious PHP file upload to (1) Dashboard's Avatar image, (2) Posts Folder image, (3) Pages Folder image and (4) Gallery Folder image.
- Database specific
{ "nvd_published_at": "2022-03-31T16:15:00Z", "cwe_ids": [ "CWE-434" ], "severity": "HIGH", "github_reviewed": true, "github_reviewed_at": "2022-04-12T20:35:52Z" }- References
Affected packages
Packagist / wpanel/wpanel4-cms
Package
- Name
- wpanel/wpanel4-cms
- Purl
- pkg:composer/wpanel/wpanel4-cms