Required CVE Record Information
Description
A vulnerability, which was classified as problematic, was found in Bettershop LaikeTui. This affects an unknown part of the file index.php?module=system&action=uploadImg. The manipulation of the argument imgFile leads to unrestricted upload. It is possible to initiate the attack remotely. This product does not use versioning. This is why information about affected and unaffected releases are unavailable. The associated identifier of this vulnerability is VDB-239799.
CVSS 3 Total
| Score | Severity | Version | Vector String |
|---|---|---|---|
| 6.3 | MEDIUM | 3.1 | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L |
| 6.3 | MEDIUM | 3.0 | CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L |
| 6.5 | — | 2.0 | AV:N/AC:L/Au:S/C:P/I:P/A:P |
Credits
- yuanshen (VulDB User) analyst
References 2 Total
- https://vuldb.com/?id.239799 vdb-entrytechnical-description
- https://vuldb.com/?ctiid.239799 signature
Updated:
This container includes required additional information provided by the CVE Program for this vulnerability.
References 2 Total
- https://vuldb.com/?id.239799 vdb-entrytechnical-descriptionx_transferred
- https://vuldb.com/?ctiid.239799 signaturex_transferred