Unrated

LH-EHR version REL-2_0_0 contains a Arbitrary File Upload vulnerability in Profile picture upload that can result in Remote Code Execution. This attac...

CVE-2018-1000839 First seen on SecPulse Dec 21, 2018

Original description The description as published by the source.

LH-EHR version REL-2_0_0 contains a Arbitrary File Upload vulnerability in Profile picture upload that can result in Remote Code Execution. This attack appear to be exploitable via Uploading a PHP file with image MIME type.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

References

report 0dd.zone
report github.com

Key facts

Severity: Unrated
Published: Dec 21, 2018
First seen on SecPulse: Dec 21, 2018

NVD OSV

Detection sources

OSV.dev (Open Source Vulnerabilities)Oct 20, 19:49