by Kastro
Paper/Archive/CVE-2023-0783

CVE-2023-0783

VulDB — EcShop PHP File template.php unrestricted upload

EPSS 0.9%CVSS 9.8
critical.is priorityof 100
41
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 59.0.590 × 2011.8No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

A vulnerability was found in EcShop 4.1.5. It has been classified as critical. This affects an unknown part of the file /ecshop/admin/template.php of the component PHP File Handler. The manipulation leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-220641 was assigned to this vulnerability.

Affected

ProductAffectedFixed inSource
EcShop4.1.5–CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
VulDB (CNA)4.7CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L
VulDB (CNA)4.7CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L

References

writeupvuldb.com/?id.220641refvuldb.com/?ctiid.220641exploitgithub.com/jingping911/exshopbug/blob/main/README.md