CVE-2023-1303
Assigner: VulDB
Published: 2023-03-09T21:48:49.584Z
State: PUBLISHED
title: UCMS System File Management Module fileedit.php unrestricted upload
problemTypes: descriptions: type: CWE
cweId: CWE-434
description: CWE-434 Unrestricted Upload
affected: vendor: n/a
product: UCMS
versions: version: 1.6
status: affected
modules: System File Management Module
descriptions: value: A vulnerability was found in UCMS 1.6 and classified as critical. This issue affects some unknown processing of the file sadmin/fileedit.php of the component System File Management Module. The manipulation of the argument file leads to unrestricted upload. The attack may be initiated remotely. The associated identifier of this vulnerability is VDB-222683.
value: Eine kritische Schwachstelle wurde in UCMS 1.6 gefunden. Betroffen davon ist ein unbekannter Prozess der Datei sadmin/fileedit.php der Komponente System File Management Module. Durch Beeinflussen des Arguments file mit unbekannten Daten kann eine unrestricted upload-Schwachstelle ausgenutzt werden. Die Umsetzung des Angriffs kann dabei über das Netzwerk erfolgen.
metrics: cvssV3_1: version: 3.1
baseScore: 6.3
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
baseSeverity: MEDIUM
cvssV3_0: version: 3.0
baseScore: 6.3
vectorString: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
baseSeverity: MEDIUM
cvssV2_0: version: 2.0
baseScore: 6.5
vectorString: AV:N/AC:L/Au:S/C:P/I:P/A:P
timeline: time: 2023-03-09T00:00:00.000Z
value: Advisory disclosed
time: 2023-03-09T00:00:00.000Z
value: CVE reserved
time: 2023-03-09T01:00:00.000Z
value: VulDB entry created
time: 2023-04-02T11:34:08.000Z
value: VulDB entry last update
credits: value: tale (VulDB User)
type: analyst