Non évaluée
An unrestricted file upload vulnerability in keywordsImport.php in TestLink 1.9.20 allows remote attackers to execute arbitrary code by uploading a fi...
CVE-2020-8639
Première détection SecPulse
Description d'origine La description telle que publiée par la source (souvent en anglais).
An unrestricted file upload vulnerability in keywordsImport.php in TestLink 1.9.20 allows remote attackers to execute arbitrary code by uploading a file with an executable extension. This allows an authenticated attacker to upload a malicious file (containing PHP code to execute operating system commands) to a publicly accessible directory of the application.
Références
- patch ackcent.com
- patch github.com
- report packetstormsecurity.com